CVE-2021-31642

CVE-2021-31642 affects CHIYU IoT devices: BIOSENSE, Webpass, BF-630, BF-631, and SEMAC. The root cause is an integer overflow when processing an oversized page parameter (>32 bits), which triggers a denial of service by crashing the web portal and making the device unavailable until a reboot. ...

CVE-2021-31643

CVE-2021-31643 describes an XSS vulnerability in CHIYU IoT devices (SEMAC, Biosense, BF-630, BF-631, Webpass) caused by inadequate sanitization of the if.cgi username parameter. The issue allows injection of client-side scripts through HTTP input and is reported across multiple CHIYU models. The ...