CVE:CVE-2021-31641
CNNVD:CNNVD-202106-017
BF-630W是CHIYU Technology的一款基于web的指纹安全单门生物识别读写器控制器
CHIYU科技存在跨站脚本漏洞，该漏洞源于CHIYU科技的一些物联网设备中存在未经认证的XSS漏洞，包括BF-630、BF-450M、BF-430、BF-431、BF631-W、BF830-W、Webpass、bf - min - w和SEMAC，原因是在生成HTTP 404消息时缺乏消毒。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade chiyu-tech bf-430_firmware to a higher version than -; Upgrade chiyu-tech bf-431_firmware to a higher version than -; Upgrade chiyu-tech bf-450m_firmware to a higher version than -; Upgrade chiyu-tech semac_s2_firmware to a higher version than -; Upgrade chiyu-tech semac_d1_firmware to a higher version than -; Upgrade chiyu-tech semac_d2_firmware to a higher version than -; Upgrade chiyu-tech semac_d4_firmware to a higher version than -; Upgrade chiyu-tech semac_s3v3_firmware to a higher version than -; Upgrade chiyu-tech semac_d2_n300_firmware to a higher version than -; Upgrade chiyu-tech semac_s1_osdp_firmware to a higher version than -; Upgrade chiyu-tech bf-630_firmware to a higher version than -; Upgrade chiyu-tech bf-631w_firmware to a higher version than -; Upgrade chiyu-tech bf-830w_firmware to a higher version than -; Upgrade chiyu-tech webpass_firmware to a higher version than -; Upgrade chiyu-tech bfminiw_firmware to a higher version than -