Lucene search

[email protected]CVE-2021-31252

HistoryJun 04, 2021 - 9:15 p.m.

CVE-2021-31252

2021-06-0421:15:00

CWE-601

[email protected]

web.nvd.nist.gov

cve-2021-31252

open redirect vulnerability

chiyu technology

bf-630

bf-450m

bf-430

bf-431

bf631-w

bf830-w

webpass

semac

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

46.8%

JSON

An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to convince the user to click on it.

CPENameOperatorVersion
chiyu-tech:bf-430_firmwarechiyu-tech bf-430 firmwareeq-
chiyu-tech:bf-431_firmwarechiyu-tech bf-431 firmwareeq-
chiyu-tech:bf-450m_firmwarechiyu-tech bf-450m firmwareeq-
chiyu-tech:semac_s2_firmwarechiyu-tech semac s2 firmwareeq-
chiyu-tech:semac_d1_firmwarechiyu-tech semac d1 firmwareeq-
chiyu-tech:semac_d2_firmwarechiyu-tech semac d2 firmwareeq-
chiyu-tech:semac_d4_firmwarechiyu-tech semac d4 firmwareeq-
chiyu-tech:semac_s3v3_firmwarechiyu-tech semac s3v3 firmwareeq-
chiyu-tech:semac_d2_n300_firmwarechiyu-tech semac d2 n300 firmwareeq-
chiyu-tech:semac_s1_osdp_firmwarechiyu-tech semac s1 osdp firmwareeq-

CPE	Name	Operator	Version
chiyu-tech:bf-430_firmware	chiyu-tech bf-430 firmware	eq	-
chiyu-tech:bf-431_firmware	chiyu-tech bf-431 firmware	eq	-
chiyu-tech:bf-450m_firmware	chiyu-tech bf-450m firmware	eq	-
chiyu-tech:semac_s2_firmware	chiyu-tech semac s2 firmware	eq	-
chiyu-tech:semac_d1_firmware	chiyu-tech semac d1 firmware	eq	-
chiyu-tech:semac_d2_firmware	chiyu-tech semac d2 firmware	eq	-
chiyu-tech:semac_d4_firmware	chiyu-tech semac d4 firmware	eq	-
chiyu-tech:semac_s3v3_firmware	chiyu-tech semac s3v3 firmware	eq	-
chiyu-tech:semac_d2_n300_firmware	chiyu-tech semac d2 n300 firmware	eq	-
chiyu-tech:semac_s1_osdp_firmware	chiyu-tech semac s1 osdp firmware	eq	-

Rows per page:

1-10 of 141

References

gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31252

seguranca-informatica.pt/dancing-in-the-iot-chiyu-devices-vulnerable-to-remote-attacks/

www.chiyu-tech.com/msg/message-Firmware-update-87.html

Social References

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

46.8%

JSON

Related for CVE-2021-31252

prion1 cvelist1