CVE-2021-31251

Related Files

CHIYU IoT Telnet Authentication Bypass

Posted Jun 3, 2021

Authored by sirpedrotavares

Several IoT devices from the CHIYU Technology firm are vulnerable to a flaw that permits bypassing the telnet authentication process due to an overflow during the negotiation of the telnet protocol. Telnet authentication is bypassed by supplying a specially malformed request, and an attacker may force the remote telnet server to believe that the user has already authenticated. Several models are vulnerable, including BF-430, BF-431, BF-450M, and SEMAC with the most recent firmware versions.

tags | exploit, remote, overflow, protocol, bypass

advisories | CVE-2021-31251

SHA-256 | 781c1db46d4908a42a01a83b90b7f6c823afa8285764c401421aada6d4c0a9d1

Download | Favorite | View