← Back

CVE-2021-31642

nvd nist
Published: Jun 1, 2021Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. The vulnerability can be explored by sending an unexpected integer (> 32 bits) on the page parameter that will crash the web portal and making it unavailable until a reboot of the device.

Affected (11)

Chiyu Tech
11 products
Semac S2 Firmware
Semac D1 Firmware
Semac D2 Firmware
Semac D4 Firmware
Semac S3v3 Firmware
Semac D2 N300 Firmware
Semac S1 Osdp Firmware
Bf 631 Firmware
Bf 630 Firmware
Webpass Firmware
Biosense Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac S2 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac S2
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac D1 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac D1
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac D2 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac D2
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac D4 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac D4
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac S3v3 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac S3v3
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac D2 N300 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac D2 N300
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Semac S1 Osdp Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Semac S1 Osdp
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bf 631 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Bf 631
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bf 630 Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Bf 630
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Webpass Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Webpass
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Biosense Firmware
All versions
Running on/withPlatform Versions
Chiyu Tech
Biosense
All versions

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (8)

Source: cve@mitre.org
ExploitThird Party AdvisoryVDB Entry
Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.