CVE-2021-31642 Integer overflow in n/a
An attacker can cause a denial of service on CHIYU Technology IoT devices by sending an oversized integer to the web portal, requiring a reboot to restore service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-31642?
CVE-2021-31642 is a medium-severity vulnerability in n/a, published on 1 Jun 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. The vulnerability can be explored by sending an unexpected integer (> 32 bits) on the page parameter that will crash the web portal and making it unavailable until a reboot of the device.
Weakness: CWE-190
Which versions are affected by CVE-2021-31642?
It affects 11 products.
Products include Chiyu-Tech Bf-630 Firmware, Chiyu-Tech Bf-631 Firmware, Chiyu-Tech Biosense Firmware, Chiyu-Tech Semac D1 Firmware, Chiyu-Tech Semac D2 Firmware, Chiyu-Tech Semac D2 N300 Firmware and 5 more.
How do I fix CVE-2021-31642?
No fix has been published for CVE-2021-31642 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-31642 being exploited?
There is no known exploitation of CVE-2021-31642 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-6jfx-f65x-7qfx.