← Back

CVE-2021-31251

nvd nist
Published: Jun 4, 2021Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote telnet server to believe that the user has already authenticated.

Affected (10)

Chiyu Tech
10 products
Bf 430 Firmware
Bf 431 Firmware
Bf 450m Firmware
Semac S2 Firmware
Semac D1 Firmware
Semac D2 Firmware
Semac D4 Firmware
Semac S3v3 Firmware
Semac D2 N300 Firmware
Semac S1 Osdp Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bf 430 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Bf 430
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bf 431 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Bf 431
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bf 450m Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Bf 450m
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac S2 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac S2
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac D1 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac D1
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac D2 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac D2
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac D4 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac D4
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac S3v3 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac S3v3
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac D2 N300 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac D2 N300
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac S1 Osdp Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac S1 Osdp
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (6)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.