CVE-2021-31642

CVE-2021-31642 affects CHIYU IoT devices: BIOSENSE, Webpass, BF-630, BF-631, and SEMAC. The root cause is an integer overflow when processing an oversized page parameter (>32 bits), which triggers a denial of service by crashing the web portal and making the device unavailable until a reboot. ...

CVE-2021-31641

ChiYu IoT devices BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, BF-MINI-W and SEMAC are affected by an unauthenticated XSS vulnerability. The root cause is lack of sanitization when generating HTTP 404 responses, enabling remote scripting via network access. Public documentation con...

CVE-2021-31643

CVE-2021-31643 describes an XSS vulnerability in CHIYU IoT devices (SEMAC, Biosense, BF-630, BF-631, Webpass) caused by inadequate sanitization of the if.cgi username parameter. The issue allows injection of client-side scripts through HTTP input and is reported across multiple CHIYU models. The ...

CVE-2021-31252

The CVE-2021-31252 entry corresponds to an open redirect vulnerability in CHIYU Technology devices: BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC. According to the connected sources (NVD, CVE lists, CNNVD, PRION), the issue stems from an open redirect mechanism that can be...