CRITICAL🇵🇱 Wersja polska

CVE-2021-27444

CVSS 9.8v3.1pub. 2022-05-16upd. 2024-11-21

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Weintek Cmt3071

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt3071 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt3072

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt3072 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt3090

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt3090 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt3103

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt3103 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt3151

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt3151 Firmware

    OS
    Weintek
    < 20210218

  • Weintek Cmt Ctrl01

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt Ctrl01 Firmware

    OS
    Weintek
    < 20210302

  • Weintek Cmt Fhd

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt Fhd Firmware

    OS
    Weintek
    < 20210208

  • Weintek Cmt G01

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt G01 Firmware

    OS
    Weintek
    < 20210209

  • Weintek Cmt G02

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt G02 Firmware

    OS
    Weintek
    < 20210209

  • Weintek Cmt G03

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt G03 Firmware

    OS
    Weintek
    < 20210222

  • Weintek Cmt G04

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt G04 Firmware

    OS
    Weintek
    < 20210222

  • Weintek Cmt Hdm

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt Hdm Firmware

    OS
    Weintek
    < 20210204

  • Weintek Cmt Svr 100

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt Svr 100 Firmware

    OS
    Weintek
    < 20210305

  • Weintek Cmt Svr 102

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt Svr 102 Firmware

    OS
    Weintek
    < 20210305

  • Weintek Cmt Svr 200

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt Svr 200 Firmware

    OS
    Weintek
    < 20210305
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-38584CRITICAL9.8ten sam produkt

In Weintek's cMT3000 HMI Web CGI device, the cgi-bin command_wb.cgi contains a stack-based buffer overf...

CVE-2023-43492CRITICAL9.8ten sam produkt

In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overfl...

CVE-2021-27442CRITICAL9.4ten sam produkt

The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unaut...

CVE-2021-27446CRITICAL10.0ten sam produkt

The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attack...

CVE-2023-40145HIGH8.8ten sam produkt

In Weintek's cMT3000 HMI Web CGI device, an anonymous attacker can execute arbitrary commands after l...