CVE-2021-27446
Critical
Description
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
SeverityCritical
CVSS10.0
Exploit probability—
ProductWeintek Cmt-svr-100 Firmware
PublishedMay 16, 2022
First seenMay 16, 2022
Weakness typeCWE-94Code injection
How to fix
Update
- weintek cmt-svr-100_firmware20210305 or later
- weintek cmt-svr-102_firmware20210305 or later
- weintek cmt-svr-200_firmware20210305 or later
- weintek cmt-svr-202_firmware20210305 or later
- weintek cmt-g01_firmware20210209 or later
- weintek cmt-g02_firmware20210209 or later
- weintek cmt-g03_firmware20210222 or later
- weintek cmt-g04_firmware20210222 or later
- weintek cmt3071_firmware20210218 or later
- weintek cmt3072_firmware20210218 or later
- weintek cmt3090_firmware20210218 or later
- weintek cmt3103_firmware20210218 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| weintek cmt-svr-100_firmware | v < 20210305 | 20210305 |
| weintek cmt-svr-102_firmware | v < 20210305 | 20210305 |
| weintek cmt-svr-200_firmware | v < 20210305 | 20210305 |
| weintek cmt-svr-202_firmware | v < 20210305 | 20210305 |
| weintek cmt-g01_firmware | v < 20210209 | 20210209 |
| weintek cmt-g02_firmware | v < 20210209 | 20210209 |
| weintek cmt-g03_firmware | v < 20210222 | 20210222 |
| weintek cmt-g04_firmware | v < 20210222 | 20210222 |
| weintek cmt3071_firmware | v < 20210218 | 20210218 |
| weintek cmt3072_firmware | v < 20210218 | 20210218 |
| weintek cmt3090_firmware | v < 20210218 | 20210218 |
| weintek cmt3103_firmware | v < 20210218 | 20210218 |
| weintek cmt3151_firmware | v < 20210218 | 20210218 |
| weintek cmt-hdm_firmware | v < 20210204 | 20210204 |
| weintek cmt-fhd_firmware | v < 20210208 | 20210208 |
| weintek cmt-ctrl01_firmware | v < 20210302 | 20210302 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.