critical10.0
CVE-2021-27446
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on th…
Impact
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Weintek | Cmt-Svr-100 Firmware | before 20210305 |
| Weintek | Cmt-Svr-102 Firmware | before 20210305 |
| Weintek | Cmt-Svr-200 Firmware | before 20210305 |
| Weintek | Cmt-Svr-202 Firmware | before 20210305 |
| Weintek | Cmt-G01 Firmware | before 20210209 |
| Weintek | Cmt-G02 Firmware | before 20210209 |
| Weintek | Cmt-G03 Firmware | before 20210222 |
| Weintek | Cmt-G04 Firmware | before 20210222 |
| Weintek | Cmt3071 Firmware | before 20210218 |
| Weintek | Cmt3072 Firmware | before 20210218 |
| Weintek | Cmt3090 Firmware | before 20210218 |
| Weintek | Cmt3103 Firmware | before 20210218 |
Weakness classification
References
- NVD record
- CVE.org record
- https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01
- https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01