MEDIUM · 6.1

CVE-2021-31252

An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a speciall...

Vulnerability Description

An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to convince the user to click on it.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
Chiyu-TechBf-430 Firmware-
Chiyu-TechBf-430-
Chiyu-TechBf-431 Firmware-
Chiyu-TechBf-431-
Chiyu-TechBf-450M Firmware-
Chiyu-TechBf-450M-
Chiyu-TechSemac S2 Firmware-
Chiyu-TechSemac S2-
Chiyu-TechSemac D1 Firmware-
Chiyu-TechSemac D1-
Chiyu-TechSemac D2 Firmware-
Chiyu-TechSemac D2-
Chiyu-TechSemac D4 Firmware-
Chiyu-TechSemac D4-
Chiyu-TechSemac S3V3 Firmware-
Chiyu-TechSemac S3V3-
Chiyu-TechSemac D2 N300 Firmware-
Chiyu-TechSemac D2 N300-
Chiyu-TechSemac S1 Osdp Firmware-
Chiyu-TechSemac S1 Osdp-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2021-31252?

CVE-2021-31252 is a vulnerability with a CVSS score of 6.1 (MEDIUM). An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a speciall...

How severe is CVE-2021-31252?

CVE-2021-31252 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-31252?

Check the references section above for vendor advisories and patch information. Affected products include: Chiyu-Tech Bf-430 Firmware, Chiyu-Tech Bf-430, Chiyu-Tech Bf-431 Firmware, Chiyu-Tech Bf-431, Chiyu-Tech Bf-450M Firmware.