CVE-2015-5618: Chiyu BF-630 and BF-630W fingerprint access-control devices allow remote attackers to bypass authentication...

Security readout for executives and security teams

This flaw affects Chiyu BF-630 and BF-630W fingerprint access-control devices. A remote attacker may bypass authentication to read or change certain device configuration settings. Because these devices can be tied to physical access operations, exposed management interfaces should be treated as operational risk even though public severity data is incomplete. Likely exposure is limited to organizations still operating Chiyu BF-630 or BF-630W devices, especially where their web interface is reachable from untrusted networks. The bundle does not identify affected firmware versions or deployment prevalence. Prioritize confirming whether these devices exist and whether management access is exposed. Business urgency rises if the devices control physical entry points or are reachable beyond a protected admin network. Mitigation focus: Review CERT VU#360431 and vendor guidance for updates or workarounds.; Restrict device web interfaces to trusted administrator networks.; Block internet access to affected device management pages..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.