CVE-2021-31643: Chiyu-Tech Bf-630 Firmware

Medium severity, CVSS 5.4. EPSS: 88.5% chance of exploitation in the next 30 days.

An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter.

Affected products

• Chiyu-Tech Bf-630 Firmware: affected versions not specified
• Chiyu-Tech Bf-631 Firmware: affected versions not specified
• Chiyu-Tech Biosense Firmware: affected versions not specified
• Chiyu-Tech Semac d1 Firmware: affected versions not specified
• Chiyu-Tech Semac d2 Firmware: affected versions not specified
• Chiyu-Tech Semac d2 n300 Firmware: affected versions not specified
• Chiyu-Tech Semac d4 Firmware: affected versions not specified
• Chiyu-Tech Semac s1 Osdp Firmware: affected versions not specified
• Chiyu-Tech Semac s2 Firmware: affected versions not specified
• Chiyu-Tech Semac s3v3 Firmware: affected versions not specified
• Chiyu-Tech Webpass Firmware: affected versions not specified

Published 2021-06-01. Last modified 2026-06-17.