CVE-2023-32632

creationtimestamp| type| source ---|---|--- 2023-10-11 20:17:42+00:00| seen| https://t.me/cibsecurity/72115 2023-10-12 19:17:31+00:00| seen| https://t.me/truesecator/4958...

CVE-2023-32632

A command execution vulnerability exists in the validate.so diagpingstart functionality of Yifan YF325 v1.020221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability...

CVE-2023-32632

CVE-2023-32632 affects Yifan YF325 v1.0_20221108. Talos details a vulnerability in the validate.so diag_ping_start CGI path that can be reached without authentication, allowing an attacker to trigger command execution by crafting a network request. The bug enables the diag_ping_start function to ...