CVE-2021-31642 - CVE House
Back to Database
Status published Medium CVE-2021-31642

A denial of service condition exists after an integer overflow...

Vulnerability Description

A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. The vulnerability can be explored by sending an unexpected integer (> 32 bits) on the page parameter that will crash the web portal and making it unavailable until a reboot of the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-31642

Credits & Attribution

No credits recorded in the NVD database.

References

More from chiyu-tech

View All →
CVE-2021-31643
An XSS vulnerability exists in several IoT devices from CHIYU...
Medium 5.4
CVE-2021-31641
An unauthenticated XSS vulnerability exists in several IoT devices from...
Medium 6.1
CVE-2021-31252
An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431,...
Medium 6.1
CVE-2021-31251
An authentication bypass in telnet server in BF-430 and BF431...
Critical 9.8
CVE-2021-31250
Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and...
Medium 5.4

Affected Vendor

Affected Software

semac s2 firmware, semac d1 firmware, semac d2 firmware, semac d4 firmware, semac s3v3 firmware, semac d2 n300 firmware, semac s1 osdp firmware, bf-631 firmware, bf-630 firmware, webpass firmware, biosense firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: June 1st, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.