Vulnerabilities in Yifan
13 resultsVexday analysis
Yifan apresenta 13 vulnerabilidades catalogadas, com 9 classificadas como críticas, porém nenhuma sob exploração ativa conhecida no momento. A fraqueza dominante é stack-based buffer overflow (CWE-121), padrão em produtos legados, e a ausência de publicações recentes sugere que o risco é consolidado e não em evolução imediata.
CVE-2023-32645CRITICALA leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108. A specially crafted neEPSS 53.8%CVE-2023-24479CRITICALAn authentication bypass vulnerability exists in the httpd nvram.cgi functionality of Yifan YF325 v1.0_20221108. A specially crafted networkEPSS 1.7%CVE-2023-34346CRITICALA stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108. A specially crafteEPSS 1.3%CVE-2023-32632HIGHA command execution vulnerability exists in the validate.so diag_ping_start functionality of Yifan YF325 v1.0_20221108. A specially crafted EPSS 1.2%CVE-2023-35056HIGHA buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network requesEPSS 1.0%CVE-2023-35055HIGHA buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network requesEPSS 1.0%CVE-2023-35968CRITICALTwo heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A speEPSS 0.8%CVE-2023-34365CRITICALA stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20221108. A specially EPSS 0.8%CVE-2023-35965CRITICALTwo heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafteEPSS 0.8%CVE-2023-34426CRITICALA stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108. A specially craftEPSS 0.8%CVE-2023-35966CRITICALTwo heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafteEPSS 0.8%CVE-2023-35967CRITICALTwo heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A speEPSS 0.8%CVE-2023-31272HIGHA stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108. A specially crafted netwoEPSS 0.6%