Yealink UVC40 E2 devices running firmware versions before 319.410.0.71 are vulnerable to an attack by an adversary with short-term physical access. The attacker can extract Wi-Fi credentials through the USB interface and abuse sensitive firmware configuration data to gain root privileges. This enables audio and video eavesdropping within Wi-Fi coverage without triggering any LED alerts on the device.