CVE-2015-2871: Chiyu BF-660C fingerprint access-control devices allow remote attackers to bypass authentication and (1) re...

Security readout for executives and security teams

This issue affects Chiyu BF-660C fingerprint access-control devices. A remote attacker may bypass authentication and read or change communication configuration settings. Because these devices support physical access control, unauthorized configuration changes could disrupt building access operations or weaken administrative control. Exposure is most likely where Chiyu BF-660C device management interfaces are reachable from untrusted networks. The provided sources do not define affected firmware versions or broader product families. Treat this as a high-priority exposure review if BF-660C devices are deployed. The business risk is unauthorized change to access-control device communications, but public evidence is incomplete on patch status and exploitation. Mitigation focus: Review CERT VU#360431 and vendor guidance for supported fixes or compensating controls.; Remove device management interfaces from internet and untrusted network exposure.; Restrict administration to trusted management networks or VPN access..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.