24 matches found
EUVD-2020-29682
Malware in sbrugna...
EUVD-2021-18164
Malware in sbrugna...
CVE-2020-8839
Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TFsubmask field...
VulnCheck KEV: CVE-2021-31250
Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi...
CVE-2021-31250
Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi...
CVE-2021-31249
CHIYU TCP/IP Converter BF-430, BF-431, and BF-450M devices are affected by CVE-2021-31249, a CRLF injection flaw stemming from insufficient validation of the redirect= parameter in multiple CGI components. Exploitation could lead to information disclosure, data modification, or unauthorized admin...
CVE-2021-31252
The CVE-2021-31252 entry corresponds to an open redirect vulnerability in CHIYU Technology devices: BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC. According to the connected sources (NVD, CVE lists, CNNVD, PRION), the issue stems from an open redirect mechanism that can be...
PT-2021-19215 · Chiyu Technology · Bf-430 +2
Name of the Vulnerable Software and Affected Versions: CHIYU Technology Inc BF-430, BF-431, and BF-450M TCP/IP Converter devices affected versions not specified Description: A CRLF injection issue was discovered due to a lack of validation on the redirect= parameter available on multiple CGI...
PT-2021-19218
Name of the Vulnerable Software and Affected Versions BF-430 and BF431 232/422 TCP/IP Converter versions affected versions not specified BF-450M versions affected versions not specified SEMAC versions affected versions not specified Description An authentication bypass in the telnet server allows...
CVE-2021-31251: Improper Authentication
An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote telnet server to...
CVE-2021-31249: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of validation on the parameter redirect= available on multiple CGI components...
CVE-2021-31252: URL Redirection to Untrusted Site
An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to convince the user to click on it...
多款Chiyu产品注入漏洞
The Chiyu CHIYU BF-430, etc. are all networking servers that provide communication for access control, time and attendance systems, and other devices from Chiyu Technology Chiyu Inc. of Taiwan, China. A security vulnerability exists in CHIYU Technology Inc's BF-430, BF-431, and BF-450M TCP/IP...
PT-2021-19217
Name of the Vulnerable Software and Affected Versions CHIYU Technology Inc BF-430 CHIYU Technology Inc BF-431 CHIYU Technology Inc BF-450M Description The issue is related to multiple storage XSS vulnerabilities discovered in certain devices from CHIYU Technology Inc. These vulnerabilities are...
CVE-2021-31250: Improper Neutralization of Input During Web Page Generation
Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi...
PT-2021-19219
Name of the Vulnerable Software and Affected Versions CHIYU Technology BF-630 CHIYU Technology BF-450M CHIYU Technology BF-430 CHIYU Technology BF-431 CHIYU Technology BF631-W CHIYU Technology BF830-W CHIYU Technology Webpass CHIYU Technology SEMAC Description An open redirect issue exists in...
CHIYU IoT devices - (Multiple) Cross-Site Scripting Vulnerability
Exploit Title: CHIYU IoT devices - 'Multiple' Cross-Site Scripting XSS Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, BF-450M, BF-630, BF631-W, BF830-W, Webpass,...
CVE-2021-31641: Improper Neutralization of Input During Web Page Generation
An unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology, including BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, BF-MINI-W, and SEMAC due to a lack of sanitization when the HTTP 404 message is generated...
