PRODUCT PROFILE

bf-430_firmware

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2021-312502021/06/05

CHIYU TCP/IP Converter - Cross-Site Scripting

CHIYU BF-430, BF-431 and BF-450M TCP/IP Converter devices contain a cross-site scripting vulnerability due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, and ppp.cgi.

bf-430_firmwarePoC 已收录

CVSS5.4EPSS 89.4%

中危CVE-2021-312492021/06/05

CHIYU TCP/IP Converter - Carriage Return Line Feed Injection

CHIYU TCP/IP Converter BF-430, BF-431, and BF-450 are susceptible to carriage return line feed injection. The redirect= parameter, available on multiple CGI components, is not properly validated, thus enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

bf-430_firmwarePoC 已收录

CVSS6.5EPSS 89.8%