CVE-2021-27444
Critical
Description
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.
SeverityCritical
CVSS9.8
Exploit probability—
ProductWeintek Cmt-svr-100 Firmware
PublishedMay 16, 2022
First seenMay 16, 2022
Weakness typeCWE-284Improper access control
How to fix
Update
- weintek cmt-svr-100_firmware20210305 or later
- weintek cmt-svr-102_firmware20210305 or later
- weintek cmt-svr-200_firmware20210305 or later
- weintek cmt-svr-202_firmware20210305 or later
- weintek cmt-g01_firmware20210209 or later
- weintek cmt-g02_firmware20210209 or later
- weintek cmt-g03_firmware20210222 or later
- weintek cmt-g04_firmware20210222 or later
- weintek cmt3071_firmware20210218 or later
- weintek cmt3072_firmware20210218 or later
- weintek cmt3090_firmware20210218 or later
- weintek cmt3103_firmware20210218 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| weintek cmt-svr-100_firmware | v < 20210305 | 20210305 |
| weintek cmt-svr-102_firmware | v < 20210305 | 20210305 |
| weintek cmt-svr-200_firmware | v < 20210305 | 20210305 |
| weintek cmt-svr-202_firmware | v < 20210305 | 20210305 |
| weintek cmt-g01_firmware | v < 20210209 | 20210209 |
| weintek cmt-g02_firmware | v < 20210209 | 20210209 |
| weintek cmt-g03_firmware | v < 20210222 | 20210222 |
| weintek cmt-g04_firmware | v < 20210222 | 20210222 |
| weintek cmt3071_firmware | v < 20210218 | 20210218 |
| weintek cmt3072_firmware | v < 20210218 | 20210218 |
| weintek cmt3090_firmware | v < 20210218 | 20210218 |
| weintek cmt3103_firmware | v < 20210218 | 20210218 |
| weintek cmt3151_firmware | v < 20210218 | 20210218 |
| weintek cmt-hdm_firmware | v < 20210204 | 20210204 |
| weintek cmt-fhd_firmware | v < 20210208 | 20210208 |
| weintek cmt-ctrl01_firmware | v < 20210302 | 20210302 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.