https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-35968.htmlhttps://patchthecve.com/cve/CVE-2023-35968.htmlWed, 17 Jun 2026 06:05:34 +0000CRITICAL 9.8: Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflowhttps://patchthecve.com/cve/CVE-2023-35967.htmlhttps://patchthecve.com/cve/CVE-2023-35967.htmlWed, 17 Jun 2026 06:05:34 +0000CRITICAL 9.8: Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflowhttps://patchthecve.com/cve/CVE-2023-35966.htmlhttps://patchthecve.com/cve/CVE-2023-35966.htmlWed, 17 Jun 2026 06:05:33 +0000CRITICAL 9.8: Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflow result is ushttps://patchthecve.com/cve/CVE-2023-35965.htmlhttps://patchthecve.com/cve/CVE-2023-35965.htmlWed, 17 Jun 2026 06:05:33 +0000CRITICAL 9.8: Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflow result is ushttps://patchthecve.com/cve/CVE-2023-35056.htmlhttps://patchthecve.com/cve/CVE-2023-35056.htmlWed, 17 Jun 2026 06:04:21 +0000HIGH 8.8: A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.This buffer overflow is in the next_page parameter in the https://patchthecve.com/cve/CVE-2023-35055.htmlhttps://patchthecve.com/cve/CVE-2023-35055.htmlWed, 17 Jun 2026 06:04:21 +0000HIGH 8.8: A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.This buffer overflow is in the next_page parameter in the https://patchthecve.com/cve/CVE-2023-34426.htmlhttps://patchthecve.com/cve/CVE-2023-34426.htmlWed, 17 Jun 2026 06:03:37 +0000CRITICAL 9.8: A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to stack-based buffer overflow. An attacker can send a network request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2023-34365.htmlhttps://patchthecve.com/cve/CVE-2023-34365.htmlWed, 17 Jun 2026 06:03:29 +0000CRITICAL 9.8: A stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a buffer overflow. An attacker can send a network request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2023-34346.htmlhttps://patchthecve.com/cve/CVE-2023-34346.htmlWed, 17 Jun 2026 06:03:26 +0000CRITICAL 9.8: A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108. A specially crafted network packet can lead to command execution. An attacker can send a network request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2023-32645.htmlhttps://patchthecve.com/cve/CVE-2023-32645.htmlWed, 17 Jun 2026 05:59:17 +0000CRITICAL 9.8: A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to authentication bypass. An attacker can send a network request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2023-32632.htmlhttps://patchthecve.com/cve/CVE-2023-32632.htmlWed, 17 Jun 2026 05:59:16 +0000HIGH 8.8: A command execution vulnerability exists in the validate.so diag_ping_start functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2023-31272.htmlhttps://patchthecve.com/cve/CVE-2023-31272.htmlWed, 17 Jun 2026 05:56:41 +0000HIGH 8.8: A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to stack-based buffer overflow. An attacker can send a network request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2023-24479.htmlhttps://patchthecve.com/cve/CVE-2023-24479.htmlWed, 17 Jun 2026 05:39:20 +0000CRITICAL 9.8: An authentication bypass vulnerability exists in the httpd nvram.cgi functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability.