Priority HIGH 68
An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.35714 · Published 2021-06-04 · No fix listed CWE-287
Priority MEDIUM 50
An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to con…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.28551 · Published 2021-06-04 · No fix listed CWE-601
Priority HIGH 67
An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.8845 · Published 2021-06-01 · No fix listed CWE-79
Priority MEDIUM 58
A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.4367 · Published 2021-06-01 · No fix listed CWE-190
Priority LOW 35
An unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology, including BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, BF-MINI-W, and SEMAC due to a lack of sanitization when the…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.05125 · Published 2021-06-01 · No fix listed CWE-79