CVE-2021-31252

medium · 6.1

An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to convince the user to click on it.

6.1

CVSS

28.6%

EPSS (exploit prob.)

98th

EPSS percentile

2021-06-04

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses

CWE-601

Affected products

Vendor	Product	Affected versions
chiyu-tech	bf-430_firmware	all versions
chiyu-tech	bf-430	all versions
chiyu-tech	bf-431_firmware	all versions
chiyu-tech	bf-431	all versions
chiyu-tech	bf-450m_firmware	all versions
chiyu-tech	bf-450m	all versions
chiyu-tech	semac_s2_firmware	all versions
chiyu-tech	semac_s2	all versions
chiyu-tech	semac_d1_firmware	all versions
chiyu-tech	semac_d1	all versions
chiyu-tech	semac_d2_firmware	all versions
chiyu-tech	semac_d2	all versions
chiyu-tech	semac_d4_firmware	all versions
chiyu-tech	semac_d4	all versions
chiyu-tech	semac_s3v3_firmware	all versions
chiyu-tech	semac_s3v3	all versions
chiyu-tech	semac_d2_n300_firmware	all versions
chiyu-tech	semac_d2_n300	all versions
chiyu-tech	semac_s1_osdp_firmware	all versions
chiyu-tech	semac_s1_osdp	all versions
chiyu-tech	bf-630_firmware	all versions
chiyu-tech	bf-630	all versions
chiyu-tech	bf-631w_firmware	all versions
chiyu-tech	bf-631w	all versions
chiyu-tech	bf-830w_firmware	all versions
chiyu-tech	bf-830w	all versions
chiyu-tech	webpass_firmware	all versions
chiyu-tech	webpass	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-31252