CVE-2021-31249: Chiyu-Tech Bf-430 Firmware

Medium severity, CVSS 6.5. EPSS: 18% chance of exploitation in the next 30 days.

A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of validation on the parameter redirect= available on multiple CGI components.

Affected products

• Chiyu-Tech Bf-430 Firmware: affected versions not specified
• Chiyu-Tech Bf-431 Firmware: affected versions not specified
• Chiyu-Tech Bf-450m Firmware: affected versions not specified

Published 2021-06-04. Last modified 2026-06-17.