CVE-2023-24479

An authentication bypass vulnerability exists in the httpd nvram.cgi functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability.

• CWE-284
• CWE-287

• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1762Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1762Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1762

Published

Oct 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-24473An information disclosure vulnerability exists in the TGAInp…7.5
• CVE-2023-24474Experion server may experience a DoS due to a heap overflow …7.5
• CVE-2023-24475Out of bounds read in some Intel(R) Server Board BMC firmwar…4.4
• CVE-2023-24476 An attacker with local access to the machine could record t…3.3
• CVE-2023-24477In certain conditions, depending on timing and the usage of …7
• CVE-2023-24478Use of insufficiently random values for some Intel Agilex(R)…5.5
• CVE-2023-2448The UserPro plugin for WordPress is vulnerable to unauthoriz…5.3
• CVE-2023-24480Controller DoS due to stack overflow when decoding a message…7.5
• CVE-2023-24481Improper access control in some Intel(R) Thunderbolt(TM) DCH…6.3
• CVE-2023-24482A vulnerability has been identified in COMOS V10.2 (All vers…9.8
• CVE-2023-24483A vulnerability has been identified that, if exploited, coul…7.8
• CVE-2023-24484A malicious user can cause log files to be written to a dire…5.5