Skip to content
OpenAdvisories
High · 8.8 CVE-2023-35055 EUVD-2023-39091GHSA-g2wh-ghm8-wh32

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network reque…

Published Oct 11, 2023 · Updated Nov 4, 2025 · Assigned by talos

Description

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.This buffer overflow is in the next_page parameter in the gozila_cgi function.

Affected products

VendorProductAffectedFixed
Yifan YF325 v1.0_20221108 —

References