Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.5
CVSSv3

CVE-2021-31642

Published: 01/06/2021 Updated: 08/06/2021
CVSS v2 Base Score: 6.8 | Impact Score: 6.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Subscribe to Semac S2 Firmware

Vulnerability Summary

A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. The vulnerability can be explored by sending an unexpected integer (> 32 bits) on the page parameter that will crash the web portal and making it unavailable until a reboot of the device.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

chiyu-tech semac_s2_firmware -

chiyu-tech semac_d1_firmware -

chiyu-tech semac_d2_firmware -

chiyu-tech semac_d4_firmware -

chiyu-tech semac_s3v3_firmware -

chiyu-tech semac_d2_n300_firmware -

chiyu-tech semac_s1_osdp_firmware -

chiyu-tech bf-631_firmware -

chiyu-tech bf-630_firmware -

chiyu-tech webpass_firmware -

chiyu-tech biosense_firmware -

Exploits

Exploit DB: CHIYU IoT Denial Of Service
CHIYU IoT devices suffer from an integer overflow denial of service vulnerability Affected devices include BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC with firmware versions prior to June 2021 ...

References

CWE-190https://www.chiyu-tech.com/msg/message-Firmware-update-87.htmlhttps://seguranca-informatica.pt/dancing-in-the-iot-chiyu-devices-vulnerable-to-remote-attacks/https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31642http://packetstormsecurity.com/files/162934/CHIYU-IoT-Denial-Of-Service.htmlhttps://nvd.nist.govhttps://packetstormsecurity.com/files/162934/CHIYU-IoT-Denial-Of-Service.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895blind SQL injectionCVE-2024-5064CVE-2023-52677CVE-2023-52682CVE-2024-30051CVE-2024-35849remote attackersremote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook