NetSight
IP …
medium5.4

CVE-2021-31643

An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization …

Impact

An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter.

Affected products

VendorProductAffected versions
Chiyu-TechBf-631 Firmware
All versions
Chiyu-TechBf-630 Firmware
All versions
Chiyu-TechSemac S2 Firmware
All versions
Chiyu-TechSemac D1 Firmware
All versions
Chiyu-TechSemac D2 Firmware
All versions
Chiyu-TechSemac D4 Firmware
All versions
Chiyu-TechSemac S3v3 Firmware
All versions
Chiyu-TechSemac D2 N300 Firmware
All versions
Chiyu-TechSemac S1 Osdp Firmware
All versions
Chiyu-TechWebpass Firmware
All versions
Chiyu-TechBiosense Firmware
All versions

Weakness classification

CWE-79

References