CVE-2021-31641: Chiyu-Tech Bf-430 Firmware

Medium severity, CVSS 6.1. EPSS: 5.1% chance of exploitation in the next 30 days.

An unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology, including BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, BF-MINI-W, and SEMAC due to a lack of sanitization when the HTTP 404 message is generated.

Affected products

• Chiyu-Tech Bf-430 Firmware: affected versions not specified
• Chiyu-Tech Bf-431 Firmware: affected versions not specified
• Chiyu-Tech Bf-450m Firmware: affected versions not specified
• Chiyu-Tech Bf-630 Firmware: affected versions not specified
• Chiyu-Tech Bf-631w Firmware: affected versions not specified
• Chiyu-Tech Bf-830w Firmware: affected versions not specified
• Chiyu-Tech Bfminiw Firmware: affected versions not specified
• Chiyu-Tech Semac d1 Firmware: affected versions not specified
• Chiyu-Tech Semac d2 Firmware: affected versions not specified
• Chiyu-Tech Semac d2 n300 Firmware: affected versions not specified
• Chiyu-Tech Semac d4 Firmware: affected versions not specified
• Chiyu-Tech Semac s1 Osdp Firmware: affected versions not specified
• Chiyu-Tech Semac s2 Firmware: affected versions not specified
• Chiyu-Tech Semac s3v3 Firmware: affected versions not specified
• Chiyu-Tech Webpass Firmware: affected versions not specified

Published 2021-06-01. Last modified 2026-06-17.