CVE-2021-31642

MEDIUM

CHIYU Technology IoT Devices - Denial of Service via Integer Overflow in Page Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-31642. PoCs published by sirpedrotavares.

AI-analyzed exploit summary This exploit demonstrates a denial of service (DoS) vulnerability in CHIYU IoT devices by sending an integer overflow payload via the 'page' parameter in a GET request to the 'if.cgi' component. The payload crashes the web portal, rendering the device unavailable until reboot.

Description

A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. The vulnerability can be explored by sending an unexpected integer (> 32 bits) on the page parameter that will crash the web portal and making it unavailable until a reboot of the device.

Exploits (1)

exploitdb WORKING POC
by sirpedrotavares · textwebappshardware
https://www.exploit-db.com/exploits/49937

This exploit demonstrates a denial of service (DoS) vulnerability in CHIYU IoT devices by sending an integer overflow payload via the 'page' parameter in a GET request to the 'if.cgi' component. The payload crashes the web portal, rendering the device unavailable until reboot.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: CHIYU IoT Devices (BIOSENSE, Webpass, BF-630, BF-631, SEMAC) - all firmware versions < June 2021
Auth required
Prerequisites: Network access to the vulnerable device · Valid authentication credentials
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4

Scores

CVSS v3 6.5
EPSS 0.4367
EPSS Percentile 98.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-190
Status published
Products (11)
chiyu-tech/bf-630_firmware
chiyu-tech/bf-631_firmware
chiyu-tech/biosense_firmware
chiyu-tech/semac_d1_firmware
chiyu-tech/semac_d2_firmware
chiyu-tech/semac_d2_n300_firmware
chiyu-tech/semac_d4_firmware
chiyu-tech/semac_s1_osdp_firmware
chiyu-tech/semac_s2_firmware
chiyu-tech/semac_s3v3_firmware
... and 1 more
Published Jun 01, 2021
Tracked Since Feb 18, 2026