critical9.8Public exploit code
CVE-2021-31251
An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileg…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CHIYU IoT Devices - 'Telnet' Authentication Bypass2021-06-03 · remote · hardware
Impact
An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote telnet server to believe that the user has already authenticated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chiyu-Tech | Bf-430 Firmware | All versions |
| Chiyu-Tech | Bf-431 Firmware | All versions |
| Chiyu-Tech | Bf-450m Firmware | All versions |
| Chiyu-Tech | Semac S2 Firmware | All versions |
| Chiyu-Tech | Semac D1 Firmware | All versions |
| Chiyu-Tech | Semac D2 Firmware | All versions |
| Chiyu-Tech | Semac D4 Firmware | All versions |
| Chiyu-Tech | Semac S3v3 Firmware | All versions |
| Chiyu-Tech | Semac D2 N300 Firmware | All versions |
| Chiyu-Tech | Semac S1 Osdp Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31251
- https://seguranca-informatica.pt/dancing-in-the-iot-chiyu-devices-vulnerable-to-remote-attacks/#.YLqK1KhKguU
- https://www.chiyu-tech.com/msg/message-Firmware-update-87.html
- https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31251
- https://seguranca-informatica.pt/dancing-in-the-iot-chiyu-devices-vulnerable-to-remote-attacks/#.YLqK1KhKguU
- https://www.chiyu-tech.com/msg/message-Firmware-update-87.html