CVE-2023-32632

A command execution vulnerability exists in the validate.so diag_ping_start functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.

Score

CVSS 3.1 9.8 Critical

Status

Modified - talos-cna@cisco.com

Published

2023-10-11

Last modified

2025-11-04

Weaknesses

CWE-284, CWE-77

Affected products

• Yf325 (Yifan)
• Yf325 Firmware (Yifanwireless)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1767
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1767