CVE-2021-31252: Chiyu-Tech Bf-430 Firmware

Medium severity, CVSS 6.1. EPSS: 28.6% chance of exploitation in the next 30 days.

An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to convince the user to click on it.

Affected products

• Chiyu-Tech Bf-430 Firmware: affected versions not specified
• Chiyu-Tech Bf-431 Firmware: affected versions not specified
• Chiyu-Tech Bf-450m Firmware: affected versions not specified
• Chiyu-Tech Bf-630 Firmware: affected versions not specified
• Chiyu-Tech Bf-631w Firmware: affected versions not specified
• Chiyu-Tech Bf-830w Firmware: affected versions not specified
• Chiyu-Tech Semac d1 Firmware: affected versions not specified
• Chiyu-Tech Semac d2 Firmware: affected versions not specified
• Chiyu-Tech Semac d2 n300 Firmware: affected versions not specified
• Chiyu-Tech Semac d4 Firmware: affected versions not specified
• Chiyu-Tech Semac s1 Osdp Firmware: affected versions not specified
• Chiyu-Tech Semac s2 Firmware: affected versions not specified
• Chiyu-Tech Semac s3v3 Firmware: affected versions not specified
• Chiyu-Tech Webpass Firmware: affected versions not specified

Published 2021-06-04. Last modified 2026-06-17.