Skip to content
OpenAdvisories
High · 8.8 CVE-2023-35056 EUVD-2023-39092GHSA-4v98-9r52-qqx9

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network reque…

Published Oct 11, 2023 · Updated Nov 4, 2025 · Assigned by talos

Description

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.This buffer overflow is in the next_page parameter in the cgi_handler function.

Affected products

VendorProductAffectedFixed
Yifan YF325 v1.0_20221108 —

References