CVE-2021-31251 - CVE House
Back to Database
Status published Critical CVE-2021-31251

An authentication bypass in telnet server in BF-430 and BF431...

Vulnerability Description

An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote telnet server to believe that the user has already authenticated.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-31251

Credits & Attribution

No credits recorded in the NVD database.

References

More from chiyu-tech

View All →
CVE-2021-31643
An XSS vulnerability exists in several IoT devices from CHIYU...
Medium 5.4
CVE-2021-31642
A denial of service condition exists after an integer overflow...
Medium 6.5
CVE-2021-31641
An unauthenticated XSS vulnerability exists in several IoT devices from...
Medium 6.1
CVE-2021-31252
An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431,...
Medium 6.1
CVE-2021-31250
Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and...
Medium 5.4

Affected Vendor

Affected Software

bf-430 firmware, bf-431 firmware, bf-450m firmware, semac s2 firmware, semac d1 firmware, semac d2 firmware, semac d4 firmware, semac s3v3 firmware, semac d2 n300 firmware, semac s1 osdp firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: June 4th, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.