Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi.
References
| Link | Resource |
|---|---|
| https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31250 | Exploit Third Party Advisory |
| https://seguranca-informatica.pt/dancing-in-the-iot-chiyu-devices-vulnerable-to-remote-attacks/ | Exploit Third Party Advisory |
| https://www.chiyu-tech.com/msg/message-Firmware-update-87.htm | Vendor Advisory |
| https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31250 | Exploit Third Party Advisory |
| https://seguranca-informatica.pt/dancing-in-the-iot-chiyu-devices-vulnerable-to-remote-attacks/ | Exploit Third Party Advisory |
| https://www.chiyu-tech.com/msg/message-Firmware-update-87.htm | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
21 Nov 2024, 06:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31250 - Exploit, Third Party Advisory | |
| References | () https://seguranca-informatica.pt/dancing-in-the-iot-chiyu-devices-vulnerable-to-remote-attacks/ - Exploit, Third Party Advisory | |
| References | () https://www.chiyu-tech.com/msg/message-Firmware-update-87.htm - Vendor Advisory |
Information
Published : 2021-06-04 21:15
Updated : 2024-11-21 06:05
NVD link : CVE-2021-31250
Mitre link : CVE-2021-31250
CVE.ORG link : CVE-2021-31250
JSON object : View
Products Affected
chiyu-tech
- bf-431_firmware
- bf-430_firmware
- bf-450m
- bf-450m_firmware
- bf-430
- bf-431
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')