CVE-2021-31251

critical · 9.8

An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote telnet server to believe that the user has already authenticated.

9.8

CVSS

35.7%

EPSS (exploit prob.)

98th

EPSS percentile

2021-06-04

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-287

Affected products

Vendor	Product	Affected versions
chiyu-tech	bf-430_firmware	all versions
chiyu-tech	bf-430	all versions
chiyu-tech	bf-431_firmware	all versions
chiyu-tech	bf-431	all versions
chiyu-tech	bf-450m_firmware	all versions
chiyu-tech	bf-450m	all versions
chiyu-tech	semac_s2_firmware	all versions
chiyu-tech	semac_s2	all versions
chiyu-tech	semac_d1_firmware	all versions
chiyu-tech	semac_d1	all versions
chiyu-tech	semac_d2_firmware	all versions
chiyu-tech	semac_d2	all versions
chiyu-tech	semac_d4_firmware	all versions
chiyu-tech	semac_d4	all versions
chiyu-tech	semac_s3v3_firmware	all versions
chiyu-tech	semac_s3v3	all versions
chiyu-tech	semac_d2_n300_firmware	all versions
chiyu-tech	semac_d2_n300	all versions
chiyu-tech	semac_s1_osdp_firmware	all versions
chiyu-tech	semac_s1_osdp	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-31251