Read the docs

Yifan

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Yifan records in CISA KEV

No Yifan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Yf325 Firmware 13 records HIGH

Records

13 records in Yf325 Firmware · all components

TI-2023-18028 CVE-2023-35968 · GHSA-hf24-8cc5-vvqg

Integer overflow in Yifan YF325

Priority HIGH 82

Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2023-10-11 No fix listed CWE-190
TI-2023-18027 CVE-2023-35967 · GHSA-rwqr-2q3q-m348

Integer overflow in Yifan YF325

Priority HIGH 82

Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2023-10-11 No fix listed CWE-190
TI-2023-18026 CVE-2023-35966 · GHSA-ww97-c23f-xww5

Integer overflow in Yifan YF325

Priority HIGH 82

Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2023-10-11 No fix listed CWE-190
TI-2023-18025 CVE-2023-35965 · GHSA-mm68-r4mx-mgx4

Integer overflow in Yifan YF325

Priority HIGH 82

Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2023-10-11 No fix listed CWE-190
TI-2023-17253 CVE-2023-34426 · GHSA-p98c-f272-pj99

Stack-based buffer overflow in Yifan YF325

Priority HIGH 82

A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2023-10-11 No fix listed CWE-121
TI-2023-17196 CVE-2023-34365 · GHSA-pw6h-4hwg-hjh5

Stack-based buffer overflow in Yifan YF325

Priority HIGH 82

A stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2023-10-11 No fix listed CWE-121
TI-2023-17178 CVE-2023-34346 · GHSA-3vj3-3jw5-xpqc

Out-of-bounds write in Yifan YF325

Priority HIGH 82

A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01383 Published 2023-10-11 No fix listed CWE-489
TI-2023-17532 CVE-2023-35056 · GHSA-4v98-9r52-qqx9

Stack-based buffer overflow in Yifan YF325

Priority HIGH 76

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01059 Published 2023-10-11 No fix listed CWE-121
TI-2023-17531 CVE-2023-35055 · GHSA-g2wh-ghm8-wh32

Stack-based buffer overflow in Yifan YF325

Priority HIGH 76

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01059 Published 2023-10-11 No fix listed CWE-121
TI-2023-15911 CVE-2023-32632 · GHSA-xrcm-65v6-9p73

Improper access control in Yifan YF325

Priority HIGH 76

A command execution vulnerability exists in the validate.so diag_ping_start functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01261 Published 2023-10-11 No fix listed CWE-284
TI-2023-14956 CVE-2023-31272 · GHSA-49wm-3mm7-4pj9

Stack-based buffer overflow in Yifan YF325

Priority HIGH 76

A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00728 Published 2023-10-11 No fix listed CWE-121
TI-2023-10100 CVE-2023-24479 · GHSA-ppwp-gx43-6m45

Improper access control in Yifan YF325

Priority MEDIUM 52

An authentication bypass vulnerability exists in the httpd nvram.cgi functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01831 Published 2023-10-11 No fix listed CWE-284
Open these records in search →