CVE-2023-32645
published 2023-10-11CVE-2023-32645: A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can…
PriorityP277critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
53.53%
98.9th percentile
A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to authentication bypass. An attacker can send a network request to trigger this vulnerability.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| four-faith | f3x36 | — | — |
| four-faith | f3x36_firmware | — | — |
| yifanwireless | yf325_firmware | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vulncheck9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fhhq-87cf-828w: The Four-Faith F3x36 router using firmware v2
ghsa_unreviewed·2025-02-04·CVSS 9.8
CVE-2024-9643 [CRITICAL] CWE-489 GHSA-fhhq-87cf-828w: The Four-Faith F3x36 router using firmware v2
The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to hard-coded credentials in the administrative web server. An attacker with knowledge of the credentials can gain administrative access via crafted HTTP requests. This issue appears similar to CVE-2023-32645.
VulnCheck
Four-Faith f3x36_firmware Active Debug Code
vulncheck·2024·CVSS 9.8
CVE-2024-9643 [CRITICAL] Four-Faith f3x36_firmware Active Debug Code
Four-Faith f3x36_firmware Active Debug Code
The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to hard-coded credentials in the administrative web server. An attacker with knowledge of the credentials can gain administrative access via crafted HTTP requests. This issue appears similar to CVE-2023-32645.
Affected: Four-Faith f3x36_firmware
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2024-9643&date=2025-10-13; https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2024-9643&date=2025-10-14; https://api.vulncheck.com/v3/index/vulncheck-canaries?
GHSA
GHSA-h538-8m3c-jg9c: A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1
ghsa_unreviewed·2023-10-11
CVE-2023-32645 [CRITICAL] CWE-489 GHSA-h538-8m3c-jg9c: A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1
A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to authentication bypass. An attacker can send a network request to trigger this vulnerability.
No detection rules found.
No public exploits indexed.
Talos
10 zero-day vulnerabilities in industrial cell router could lead to code execution, buffer overflows
blogs_talos·2023-10-11·CVSS 9.8
[CRITICAL] 10 zero-day vulnerabilities in industrial cell router could lead to code execution, buffer overflows
Cisco Talos recently disclosed 11 vulnerabilities, 10 of which are zero-days without a patch in an industrial cellular router.
Attackers could exploit these vulnerabilities in the Yifan YF325 to carry out a variety of attacks, in some cases gaining the ability to execute arbitrary shell commands on the targeted device.
The one other security issue Talos has disclosed over the past two weeks is a use-after-free vulnerability in an open-source port of WebKit, a popular content rendering engine used in popular web browsers like Apple Safari.
For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from Snort.org, and our latest Vulnerability Advisories are always posted on Talos Intelligence’s website.
## Yifan YF325
Discovered by France
Talos
10 zero-day vulnerabilities in industrial cell router could lead to code execution, buffer overflows
blogs_talos·2023-10-11·CVSS 9.8
[CRITICAL] 10 zero-day vulnerabilities in industrial cell router could lead to code execution, buffer overflows
## 10 zero-day vulnerabilities in industrial cell router could lead to code execution, buffer overflows
Cisco Talos recently disclosed 11 vulnerabilities, 10 of which are zero-days without a patch in an industrial cellular router.
Attackers could exploit these vulnerabilities in the Yifan YF325 to carry out a variety of attacks, in some cases gaining the ability to execute arbitrary shell commands on the targeted device.
The one other security issue Talos has disclosed over the past two weeks is a use-after-free vulnerability in an open-source port of WebKit, a popular content rendering engine used in popular web browsers like Apple Safari.
For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from Snort.org , and our latest Vulnera
2023-10-11
Published