Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Weintek cMT-CTRL01, cMT-FHD and 5 more products 20210204, 20210208 and 5 more versions Clear all filters
TI-2021-08933 CVE-2021-27446 · GHSA-7r8g-jh99-cmrq

Weintek EasyWeb cMT Code Injection

Priority MEDIUM 54

The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02974 Published 2022-05-16 Fixed in 20210305, 20210209 +5 CWE-94
TI-2021-08931 CVE-2021-27444 · GHSA-f29h-wrwj-qwp2

Weintek EasyWeb cMT Improper Access Control

Priority MEDIUM 51

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on beha…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01184 Published 2022-05-16 Fixed in 20210305, 20210209 +5 CWE-284
TI-2021-08930 CVE-2021-27442 · GHSA-39vj-8gx7-5cj5

Weintek EasyWeb cMT Cross-site Scripting

Priority MEDIUM 50

The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.0092 Published 2022-05-16 Fixed in 20210305, 20210209 +5 CWE-79