CVE-2021-27444
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.14%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.14% probability · 65th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- weintek/cmt-svr-100 firmware · weintek/cmt-svr-102 firmware · weintek/cmt-svr-200 firmware · weintek/cmt-svr-202 firmware · weintek/cmt-g01 firmware · weintek/cmt-g02 firmware · weintek/cmt-g03 firmware · weintek/cmt-g04 firmware · weintek/cmt3071 firmware · weintek/cmt3072 firmware · weintek/cmt3090 firmware · weintek/cmt3103 firmware · weintek/cmt3151 firmware · weintek/cmt-hdm firmware · weintek/cmt-fhd firmware · weintek/cmt-ctrl01 firmware
- Source
- ics-cert@hq.dhs.gov
References
- https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdfMitigation, Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01Third Party Advisory, US Government Resource
- https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdfMitigation, Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01Third Party Advisory, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.