CVEvulnerability

CVE-2021-27444

9.8 CRITICAL Published 2022-05-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-05-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-284

Description

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.

Affected configurations

• weintek cmt-svr-100 firmware (< 20210305) • weintek cmt-svr-102 firmware (< 20210305) • weintek cmt-svr-200 firmware (< 20210305) • weintek cmt-svr-202 firmware (< 20210305) • weintek cmt-g01 firmware (< 20210209) • weintek cmt-g02 firmware (< 20210209) • weintek cmt-g03 firmware (< 20210222) • weintek cmt-g04 firmware (< 20210222) • weintek cmt3071 firmware (< 20210218) • weintek cmt3072 firmware (< 20210218) • weintek cmt3090 firmware (< 20210218) • weintek cmt3103 firmware (< 20210218) • weintek cmt3151 firmware (< 20210218) • weintek cmt-hdm firmware (< 20210204) • weintek cmt-fhd firmware (< 20210208) • weintek cmt-ctrl01 firmware (< 20210302)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References