Yf325 Firmware@* Security Vulnerabilities and Issues — Yf325 Firmware@* CVE List

Lucene search

YifanwirelessYf325 Firmware*

13 matches found

CVE•added 2023/10/11 4:15 p.m.•60 views

CVE-2023-35056

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.This buffer overflow is in the next_page parameter in the...

9.8CVSS9.7AI score0.00193EPSS

CVE•added 2023/10/11 4:15 p.m.•59 views

CVE-2023-32645

A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to authentication bypass. An attacker can send a network request to trigger this vulnerability.

9.8CVSS9.4AI score0.00063EPSS

CVE•added 2023/10/11 4:15 p.m.•53 views

CVE-2023-35967

Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflo...

9.8CVSS9.8AI score0.00243EPSS

CVE•added 2023/10/11 4:15 p.m.•51 views

CVE-2023-24479

An authentication bypass vulnerability exists in the httpd nvram.cgi functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability.

9.8CVSS9.7AI score0.00078EPSS

CVE•added 2023/10/11 4:15 p.m.•50 views

CVE-2023-35966

Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflow result is u...

9.8CVSS9.8AI score0.00243EPSS

CVE•added 2023/10/11 4:15 p.m.•49 views

CVE-2023-35055

9.8CVSS9.7AI score0.00193EPSS

CVE•added 2023/10/11 4:15 p.m.•49 views

CVE-2023-35965

9.8CVSS9.8AI score0.00264EPSS

CVE•added 2023/10/11 4:15 p.m.•48 views

CVE-2023-34365

A stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a buffer overflow. An attacker can send a network request to trigger this vulnerability.

9.8CVSS9.5AI score0.00243EPSS

CVE•added 2023/10/11 4:15 p.m.•44 views

CVE-2023-32632

A command execution vulnerability exists in the validate.so diag_ping_start functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.

9.8CVSS9.5AI score0.00125EPSS

CVE•added 2023/10/11 4:15 p.m.•43 views

CVE-2023-31272

A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to stack-based buffer overflow. An attacker can send a network request to trigger this vulnerability.

9.8CVSS9.5AI score0.00243EPSS

CVE•added 2023/10/11 4:15 p.m.•41 views

CVE-2023-34346

A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108. A specially crafted network packet can lead to command execution. An attacker can send a network request to trigger this vulnerability.

9.8CVSS9.7AI score0.00212EPSS

CVE•added 2023/10/11 4:15 p.m.•39 views

CVE-2023-34426

A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to stack-based buffer overflow. An attacker can send a network request to trigger this vulnerability.

9.8CVSS9.5AI score0.00243EPSS

CVE•added 2023/10/11 4:15 p.m.•38 views

CVE-2023-35968

9.8CVSS9.8AI score0.00243EPSS