CVE-2023-32632 A command execution vulnerability exists in the validate.so diag_ping_start functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker c...
CriticalCVSS 9.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A command execution vulnerability exists in the validate.so diag_ping_start functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Yifan YF325 | = v1.0_20221108 | No fix listed |
| yifanwireless yf325 firmware | = 1.0_20221108 | No fix listed |