critical9.8
CVE-2021-27444
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sen…
Impact
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Weintek | Cmt-Svr-100 Firmware | before 20210305 |
| Weintek | Cmt-Svr-102 Firmware | before 20210305 |
| Weintek | Cmt-Svr-200 Firmware | before 20210305 |
| Weintek | Cmt-Svr-202 Firmware | before 20210305 |
| Weintek | Cmt-G01 Firmware | before 20210209 |
| Weintek | Cmt-G02 Firmware | before 20210209 |
| Weintek | Cmt-G03 Firmware | before 20210222 |
| Weintek | Cmt-G04 Firmware | before 20210222 |
| Weintek | Cmt3071 Firmware | before 20210218 |
| Weintek | Cmt3072 Firmware | before 20210218 |
| Weintek | Cmt3090 Firmware | before 20210218 |
| Weintek | Cmt3103 Firmware | before 20210218 |
Weakness classification
References
- NVD record
- CVE.org record
- https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01
- https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01