CVE-2023-34346

Summary

CVE-2023-34346 is a critical vulnerability affecting the httpd gwcfg.cgi get functionality in Yifan YF325 v1.0_20221108. This issue involves a stack-based buffer overflow, which can be triggered by a maliciously crafted network packet. Successful exploitation of this vulnerability can result in command execution, giving attackers unauthorized access and control over the affected system. This poses a significant risk to organizations using Yifan YF325 v1.0_20221108 and highlights the importance of updating affected systems with the latest security patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.