https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-31252.htmlhttps://patchthecve.com/cve/CVE-2021-31252.htmlWed, 17 Jun 2026 03:51:30 +0000MEDIUM 6.1: An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to convince the user to click on it.https://patchthecve.com/cve/CVE-2021-31251.htmlhttps://patchthecve.com/cve/CVE-2021-31251.htmlWed, 17 Jun 2026 03:51:30 +0000CRITICAL 9.8: An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote telnet server to believehttps://patchthecve.com/cve/CVE-2021-31250.htmlhttps://patchthecve.com/cve/CVE-2021-31250.htmlWed, 17 Jun 2026 03:51:30 +0000MEDIUM 5.4: Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi.https://patchthecve.com/cve/CVE-2021-31249.htmlhttps://patchthecve.com/cve/CVE-2021-31249.htmlWed, 17 Jun 2026 03:51:30 +0000MEDIUM 6.5: A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of validation on the parameter redirect= available on multiple CGI components.https://patchthecve.com/cve/CVE-2021-31641.htmlhttps://patchthecve.com/cve/CVE-2021-31641.htmlWed, 17 Jun 2026 03:52:06 +0000MEDIUM 6.1: An unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology, including BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, BF-MINI-W, and SEMAC due to a lack of sanitization when the HTTP 404 message is generated.