CRITICAL🇵🇱 Wersja polska

CVE-2021-27444

CVSS 9.8v3.1pub. 2022-05-16upd. 2024-11-21

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Weintek Cmt3071

    HW
    Weintek
    all versions

  • Weintek Cmt3071 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt3072

    HW
    Weintek
    all versions

  • Weintek Cmt3072 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt3090

    HW
    Weintek
    all versions

  • Weintek Cmt3090 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt3103

    HW
    Weintek
    all versions

  • Weintek Cmt3103 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt3151

    HW
    Weintek
    all versions

  • Weintek Cmt3151 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt Ctrl01

    HW
    Weintek
    all versions

  • Weintek Cmt Ctrl01 Firmware

    OS
    Weintek
    < 20210302

  • Weintek Cmt Fhd

    HW
    Weintek
    all versions

  • Weintek Cmt Fhd Firmware

    OS
    Weintek
    < 20210208

  • Weintek Cmt G01

    HW
    Weintek
    all versions

  • Weintek Cmt G01 Firmware

    OS
    Weintek
    < 20210209

  • Weintek Cmt G02

    HW
    Weintek
    all versions

  • Weintek Cmt G02 Firmware

    OS
    Weintek
    < 20210209

  • Weintek Cmt G03

    HW
    Weintek
    all versions

  • Weintek Cmt G03 Firmware

    OS
    Weintek
    < 20210222

  • Weintek Cmt G04

    HW
    Weintek
    all versions

  • Weintek Cmt G04 Firmware

    OS
    Weintek
    < 20210222

  • Weintek Cmt Hdm

    HW
    Weintek
    all versions

  • Weintek Cmt Hdm Firmware

    OS
    Weintek
    < 20210204

  • Weintek Cmt Svr 100

    HW
    Weintek
    all versions

  • Weintek Cmt Svr 100 Firmware

    OS
    Weintek
    < 20210305

  • Weintek Cmt Svr 102

    HW
    Weintek
    all versions

  • Weintek Cmt Svr 102 Firmware

    OS
    Weintek
    < 20210305

  • Weintek Cmt Svr 200

    HW
    Weintek
    all versions

  • Weintek Cmt Svr 200 Firmware

    OS
    Weintek
    < 20210305
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-38584CRITICAL9.8PL ✓same product

Stack-based buffer overflow w Weintek cMT3000 HMI — obejście uwierzytelnienia

CVE-2023-43492CRITICAL9.8PL ✓same product

Stack-based buffer overflow w Weintek cMT3000 HMI — pominięcie uwierzytelnienia

CVE-2021-27442CRITICAL9.4PL ✓same product

XSS w urządzeniach Weintek cMT — wstrzyknięcie złośliwego kodu JavaScript

CVE-2021-27446CRITICAL10.0PL ✓same product

Code injection z uprawnieniami root w urządzeniach Weintek cMT

CVE-2023-40145HIGH8.8same product

In Weintek's cMT3000 HMI Web CGI device, an anonymous attacker can execute arbitrary commands after l...