PatchTheCVEyf325 firmware vulnerabilities and fixes
Recent CVEs affecting yf325 firmware, with upgrade or downgrade steps. 13 tracked.
Also searched as: yf325firmware.
yf325 firmware has 13 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-10-11. Highest priority: CVE-2023-32645 (score 64/100).
- CVE-2023-35968 CRITICAL 9.8 MITIGATE Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yi
- CVE-2023-35967 CRITICAL 9.8 MITIGATE Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yi
- CVE-2023-35966 CRITICAL 9.8 MITIGATE Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.
- CVE-2023-35965 CRITICAL 9.8 MITIGATE Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.
- CVE-2023-35056 HIGH 8.8 MITIGATE A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108
- CVE-2023-35055 HIGH 8.8 MITIGATE A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108
- CVE-2023-34426 CRITICAL 9.8 MITIGATE A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1
- CVE-2023-34365 CRITICAL 9.8 MITIGATE A stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF3
- CVE-2023-34346 CRITICAL 9.8 MITIGATE A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.
- CVE-2023-32645 CRITICAL 9.8 MITIGATE A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20
- CVE-2023-32632 HIGH 8.8 MITIGATE A command execution vulnerability exists in the validate.so diag_ping_start functionality of Yifan YF325 v1.0_
- CVE-2023-31272 HIGH 8.8 MITIGATE A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221
- CVE-2023-24479 CRITICAL 9.8 MITIGATE An authentication bypass vulnerability exists in the httpd nvram.cgi functionality of Yifan YF325 v1.0_2022110
FAQ
How do I fix yf325 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yf325 firmware being exploited right now?
None of the tracked yf325 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yf325 firmware CVE should I patch first?
CVE-2023-32645 currently ranks highest (64/100): A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20.