The vulnerability of the diag_ping_start function (validate.so) in the microprogrammed industrial Wi-Fi routers Yifan YF325 allows a hacker to execute arbitrary commands.

The vulnerability of the diagpingstart function in the validate.so library of Yifan YF325 industrial Wi-Fi routers relates to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...