Approved changes feed: RSS · Atom

cpe:2.3:h:chiyu-tech:semac_d2:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorChiyu Tech (c736486b-d6c3-568e-9a53-51d4ba69bcaf)
ProductSemac D2 (0996aa8a-dda8-52ea-bcb3-e49f00358c49)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-31643 not_vulnerable 2026-06-03 14:44:33.410768 Details available
An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter.
Published: 2021-06-01T14:16:12.000Z
Updated: 2024-08-03T23:03:33.649Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31642 not_vulnerable 2026-06-03 14:44:33.405552 Details available
A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. The vulnerability can be explored by sending an unexpected integer (> 32 bits) on the page parameter that will crash the web portal and making it unavailable until a reboot of the device.
Published: 2021-06-01T14:13:54.000Z
Updated: 2024-08-03T23:03:33.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31641 not_vulnerable 2026-06-03 14:44:33.400525 Details available
An unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology, including BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, BF-MINI-W, and SEMAC due to a lack of sanitization when the HTTP 404 message is generated.
Published: 2021-06-01T14:11:39.000Z
Updated: 2024-08-03T23:03:33.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31252 not_vulnerable 2026-06-03 14:44:32.035074 Details available
An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to convince the user to click on it.
Published: 2021-06-04T20:21:47.000Z
Updated: 2024-08-03T22:55:53.302Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31251 not_vulnerable 2026-06-03 14:44:32.030285 Details available
An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote telnet server to believe that the user has already authenticated.
Published: 2021-06-04T20:25:52.000Z
Updated: 2024-08-03T22:55:53.355Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.