PatchTheCVEbf-430 firmware vulnerabilities and fixes
Recent CVEs affecting bf-430 firmware, with upgrade or downgrade steps. 6 tracked.
Also searched as: bf 430 firmware, bf-430firmware.
bf-430 firmware has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-06-04. Highest priority: CVE-2021-31251 (score 69/100).
- CVE-2021-31641 MEDIUM 6.1 MITIGATE MITIGATE An unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology, including BF-630, BF
- CVE-2021-31252 MEDIUM 6.1 MITIGATE MITIGATE An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC
- CVE-2021-31251 CRITICAL 9.8 MITIGATE MITIGATE An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from
- CVE-2021-31250 MEDIUM 5.4 MITIGATE MITIGATE Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices fr
- CVE-2021-31249 MEDIUM 6.5 MITIGATE MITIGATE A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices from CHIYU Te
- CVE-2020-8839 MEDIUM 6.1 UPGRADE Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by
FAQ
How do I fix bf-430 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bf-430 firmware being exploited right now?
None of the tracked bf-430 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bf-430 firmware CVE should I patch first?
CVE-2021-31251 currently ranks highest (69/100): An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from.