An unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology, including BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, BF-MINI-W, and SEMAC due to a lack of sanitization when the HTTP 404 message is generated.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
chiyu-tech bf-430_firmware - |
||
chiyu-tech bf-431_firmware - |
||
chiyu-tech bf-450m_firmware - |
||
chiyu-tech semac_s2_firmware - |
||
chiyu-tech semac_d1_firmware - |
||
chiyu-tech semac_d2_firmware - |
||
chiyu-tech semac_d4_firmware - |
||
chiyu-tech semac_s3v3_firmware - |
||
chiyu-tech semac_d2_n300_firmware - |
||
chiyu-tech semac_s1_osdp_firmware - |
||
chiyu-tech bf-630_firmware - |
||
chiyu-tech bf-631w_firmware - |
||
chiyu-tech bf-830w_firmware - |
||
chiyu-tech webpass_firmware - |
||
chiyu-tech bfminiw_firmware - |