Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-34346 EUVD-2023-38426GHSA-3vj3-3jw5-xpqc

A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108. A specially craft…

Published Oct 11, 2023 · Updated Nov 4, 2025 · Assigned by talos

Vendor: Yifan Product: YF325

Description

A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108. A specially crafted network packet can lead to command execution. An attacker can send a network request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Yifan YF325 v1.0_20221108 —

References