CVE-2021-31642

medium · 6.5

A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. The vulnerability can be explored by sending an unexpected integer (> 32 bits) on the page parameter that will crash the web portal and making it unavailable until a reboot of the device.

6.5

CVSS

43.7%

EPSS (exploit prob.)

99th

EPSS percentile

2021-06-01

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-190

Affected products

Vendor	Product	Affected versions
chiyu-tech	semac_s2_firmware	all versions
chiyu-tech	semac_s2	all versions
chiyu-tech	semac_d1_firmware	all versions
chiyu-tech	semac_d1	all versions
chiyu-tech	semac_d2_firmware	all versions
chiyu-tech	semac_d2	all versions
chiyu-tech	semac_d4_firmware	all versions
chiyu-tech	semac_d4	all versions
chiyu-tech	semac_s3v3_firmware	all versions
chiyu-tech	semac_s3v3	all versions
chiyu-tech	semac_d2_n300_firmware	all versions
chiyu-tech	semac_d2_n300	all versions
chiyu-tech	semac_s1_osdp_firmware	all versions
chiyu-tech	semac_s1_osdp	all versions
chiyu-tech	bf-631_firmware	all versions
chiyu-tech	bf-631	all versions
chiyu-tech	bf-630_firmware	all versions
chiyu-tech	bf-630	all versions
chiyu-tech	webpass_firmware	all versions
chiyu-tech	webpass	all versions
chiyu-tech	biosense_firmware	all versions
chiyu-tech	biosense	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-31642