CVE-2021-31642: A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology...

Security readout for executives and security teams

CVE-2021-31642 can make certain CHIYU Technology IoT device web portals crash and stay unavailable until rebooted. The business risk is operational disruption, especially if these devices support access control, biometric, or facility workflows and their management portals are reachable from untrusted networks. Exposure is most likely where affected CHIYU device web interfaces are reachable from the internet, partner networks, guest networks, or broad internal networks. Evidence is incomplete on affected firmware versions, so asset discovery and vendor firmware checks are necessary. Treat this as a targeted availability risk for CHIYU-managed physical or IoT operations. Prioritize internet-exposed or facility-critical devices first. It is not supported by the bundle as actively exploited, but remediation should not wait where device outages affect business operations. Mitigation focus: Identify affected CHIYU BIOSENSE, Webpass, BF-630, BF-631, and SEMAC deployments.; Check CHIYU firmware guidance and apply applicable vendor updates.; Restrict web portal access to trusted administration networks only..

Prepared

Jun 2, 2026, 19:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.