VulnerabilityModified
CVE-2021-27446
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
CRITICAL 9.8EPSS 2.86%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.86%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 2.86% probability · 86th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-94
- Affected
- weintek/cmt-svr-100 firmware · weintek/cmt-svr-102 firmware · weintek/cmt-svr-200 firmware · weintek/cmt-svr-202 firmware · weintek/cmt-g01 firmware · weintek/cmt-g02 firmware · weintek/cmt-g03 firmware · weintek/cmt-g04 firmware · weintek/cmt3071 firmware · weintek/cmt3072 firmware · weintek/cmt3090 firmware · weintek/cmt3103 firmware · weintek/cmt3151 firmware · weintek/cmt-hdm firmware · weintek/cmt-fhd firmware · weintek/cmt-ctrl01 firmware
- Source
- ics-cert@hq.dhs.gov
References
- https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdfMitigation, Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01Third Party Advisory, US Government Resource
- https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdfMitigation, Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01Third Party Advisory, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.