CVE-2020-8839: Chiyu-T Bf-430 Firmware

Medium severity, CVSS 6.1. EPSS: 2.1% chance of exploitation in the next 30 days.

Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TF_submask field.

Affected products

• Chiyu-T Bf-430 Firmware: before 1.16.00 (fixed in 1.16.00)

Published 2020-02-12. Last modified 2026-06-17.