CVE-2015-5618: Chiyutw Bf-630

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Chiyu BF-630 and BF-630W fingerprint access-control devices allow remote attackers to bypass authentication and (1) read or (2) modify (a) Voice Time Set configuration settings via a request to voice.htm or (b) UniFinger configuration settings via a request to bf.htm, a different vulnerability than CVE-2015-2871.

Affected products

• Chiyutw Bf-630: any version
• Chiyutw Bf-630w: any version

Published 2015-08-01. Last modified 2026-06-17.