Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Vendor: Yifan Clear all filters
TI-2023-17532 CVE-2023-35056 · GHSA-4v98-9r52-qqx9

Stack-based buffer overflow in Yifan YF325

Priority HIGH 76

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01059 Published 2023-10-11 No fix listed CWE-121
TI-2023-17531 CVE-2023-35055 · GHSA-g2wh-ghm8-wh32

Stack-based buffer overflow in Yifan YF325

Priority HIGH 76

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01059 Published 2023-10-11 No fix listed CWE-121
TI-2023-10100 CVE-2023-24479 · GHSA-ppwp-gx43-6m45

Improper access control in Yifan YF325

Priority MEDIUM 52

An authentication bypass vulnerability exists in the httpd nvram.cgi functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01831 Published 2023-10-11 No fix listed CWE-284
TI-2023-17196 CVE-2023-34365 · GHSA-pw6h-4hwg-hjh5

Stack-based buffer overflow in Yifan YF325

Priority HIGH 82

A stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2023-10-11 No fix listed CWE-121
TI-2023-17178 CVE-2023-34346 · GHSA-3vj3-3jw5-xpqc

Out-of-bounds write in Yifan YF325

Priority HIGH 82

A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01383 Published 2023-10-11 No fix listed CWE-489
TI-2023-14956 CVE-2023-31272 · GHSA-49wm-3mm7-4pj9

Stack-based buffer overflow in Yifan YF325

Priority HIGH 76

A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00728 Published 2023-10-11 No fix listed CWE-121
TI-2023-17253 CVE-2023-34426 · GHSA-p98c-f272-pj99

Stack-based buffer overflow in Yifan YF325

Priority HIGH 82

A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2023-10-11 No fix listed CWE-121
TI-2023-15911 CVE-2023-32632 · GHSA-xrcm-65v6-9p73

Improper access control in Yifan YF325

Priority HIGH 76

A command execution vulnerability exists in the validate.so diag_ping_start functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01261 Published 2023-10-11 No fix listed CWE-284
TI-2023-18026 CVE-2023-35966 · GHSA-ww97-c23f-xww5

Integer overflow in Yifan YF325

Priority HIGH 82

Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2023-10-11 No fix listed CWE-190
TI-2023-18025 CVE-2023-35965 · GHSA-mm68-r4mx-mgx4

Integer overflow in Yifan YF325

Priority HIGH 82

Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2023-10-11 No fix listed CWE-190
TI-2023-18028 CVE-2023-35968 · GHSA-hf24-8cc5-vvqg

Integer overflow in Yifan YF325

Priority HIGH 82

Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2023-10-11 No fix listed CWE-190
TI-2023-18027 CVE-2023-35967 · GHSA-rwqr-2q3q-m348

Integer overflow in Yifan YF325

Priority HIGH 82

Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2023-10-11 No fix listed CWE-190