CRITICAL🇵🇱 Wersja polska

CVE-2021-27442

CVSS 9.4v3.1pub. 2022-05-16upd. 2024-11-21

The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

  • Weintek Cmt3071

    HW
    Weintek
    all versions

  • Weintek Cmt3071 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt3072

    HW
    Weintek
    all versions

  • Weintek Cmt3072 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt3090

    HW
    Weintek
    all versions

  • Weintek Cmt3090 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt3103

    HW
    Weintek
    all versions

  • Weintek Cmt3103 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt3151

    HW
    Weintek
    all versions

  • Weintek Cmt3151 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt Ctrl01

    HW
    Weintek
    all versions

  • Weintek Cmt Ctrl01 Firmware

    OS
    Weintek
    < 20210302

  • Weintek Cmt Fhd

    HW
    Weintek
    all versions

  • Weintek Cmt Fhd Firmware

    OS
    Weintek
    < 20210208

  • Weintek Cmt G01

    HW
    Weintek
    all versions

  • Weintek Cmt G01 Firmware

    OS
    Weintek
    < 20210209

  • Weintek Cmt G02

    HW
    Weintek
    all versions

  • Weintek Cmt G02 Firmware

    OS
    Weintek
    < 20210209

  • Weintek Cmt G03

    HW
    Weintek
    all versions

  • Weintek Cmt G03 Firmware

    OS
    Weintek
    < 20210222

  • Weintek Cmt G04

    HW
    Weintek
    all versions

  • Weintek Cmt G04 Firmware

    OS
    Weintek
    < 20210222

  • Weintek Cmt Hdm

    HW
    Weintek
    all versions

  • Weintek Cmt Hdm Firmware

    OS
    Weintek
    < 20210204

  • Weintek Cmt Svr 100

    HW
    Weintek
    all versions

  • Weintek Cmt Svr 100 Firmware

    OS
    Weintek
    < 20210305

  • Weintek Cmt Svr 102

    HW
    Weintek
    all versions

  • Weintek Cmt Svr 102 Firmware

    OS
    Weintek
    < 20210305

  • Weintek Cmt Svr 200

    HW
    Weintek
    all versions

  • Weintek Cmt Svr 200 Firmware

    OS
    Weintek
    < 20210305
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2023-38584CRITICAL9.8PL ✓same product

Stack-based buffer overflow w Weintek cMT3000 HMI — obejście uwierzytelnienia

CVE-2023-43492CRITICAL9.8PL ✓same product

Stack-based buffer overflow w Weintek cMT3000 HMI — pominięcie uwierzytelnienia

CVE-2021-27444CRITICAL9.8PL ✓same product

Weintek cMT — Auth Bypass umożliwiający zdalny dostęp i działania administracyjne

CVE-2021-27446CRITICAL10.0PL ✓same product

Code injection z uprawnieniami root w urządzeniach Weintek cMT

CVE-2023-40145HIGH8.8same product

In Weintek's cMT3000 HMI Web CGI device, an anonymous attacker can execute arbitrary commands after l...