CVE-2023-35055

2023-10-1115:14:31

CWE-121

talos

raw.githubusercontent.com

buffer overflow

httpd next_page

command execution

network request

gozila_cgi function

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.This buffer overflow is in the next_page parameter in the gozila_cgi function.