Back to Database
Status published
Medium
CVE-2021-31250
Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and...
Vulnerability Description
Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-31250
Credits & Attribution
No credits recorded in the NVD database.
References
More from chiyu-tech
View All →CVE-2021-31643
An XSS vulnerability exists in several IoT devices from CHIYU...
Medium
5.4
CVE-2021-31642
A denial of service condition exists after an integer overflow...
Medium
6.5
CVE-2021-31641
An unauthenticated XSS vulnerability exists in several IoT devices from...
Medium
6.1
CVE-2021-31252
An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431,...
Medium
6.1
CVE-2021-31251
An authentication bypass in telnet server in BF-430 and BF431...
Critical
9.8
Affected Vendor
chiyu-tech
View all reports →Affected Software
bf-430 firmware, bf-431 firmware, bf-450m firmware
Vulnerable Versions:
Unknown
Timeline
Official Publish:
June 4th, 2021
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.