critical9.4
CVE-2021-27442
The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious Ja…
Impact
The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Weintek | Cmt-Svr-100 Firmware | before 20210305 |
| Weintek | Cmt-Svr-102 Firmware | before 20210305 |
| Weintek | Cmt-Svr-200 Firmware | before 20210305 |
| Weintek | Cmt-Svr-202 Firmware | before 20210305 |
| Weintek | Cmt-G01 Firmware | before 20210209 |
| Weintek | Cmt-G02 Firmware | before 20210209 |
| Weintek | Cmt-G03 Firmware | before 20210222 |
| Weintek | Cmt-G04 Firmware | before 20210222 |
| Weintek | Cmt3071 Firmware | before 20210218 |
| Weintek | Cmt3072 Firmware | before 20210218 |
| Weintek | Cmt3090 Firmware | before 20210218 |
| Weintek | Cmt3103 Firmware | before 20210218 |
Weakness classification
References
- NVD record
- CVE.org record
- https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01
- https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01