A Talos researcher discovered over a dozen vulnerabilities in Yifan’s YF325 cellular router. According to the vendor, the device has been deployed in various fields, including self-service terminals, intelligent transportation, industrial automation, smart grid, water supply, finance, and point-of-sale systems.
A majority of the flaws found in the router have been assigned ‘critical severity’ ratings and the remaining have been classified as ‘high severity’.
Talos said the most serious of the security holes can be exploited to execute an arbitrary shell on the targeted router (CVE-2023-32632), change the admin credentials of the device and obtain root access (CVE-2023-24479), and leverage leftover debug credentials to access the device with admin privileges (CVE-2023-32645).
The remaining weaknesses can be exploited for arbitrary code/command execution and denial-of-service (DoS) attacks.
All vulnerabilities can be exploited by sending specially crafted network requests to the targeted device.
SecurityWeek has reached out to Yifan for comment and will update this article if the company responds.
| Learn
More at SecurityWeek’s ICS Cyber Security
Conference The leading global conference series for Operations, Control Systems and OT/IT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.  October 23-26, 2023 | Atlanta www.icscybersecurityconference.com |
Related: Dozens of RCE Vulnerabilities Impact Milesight Industrial Router
Related: InHand Industrial Router Vulnerabilities Expose Internal OT Networks to Attacks
Related: 10 Vulnerabilities Found in Widely Used Robustel Industrial Routers
