PT-2022-9823 · Weintek · Weintek Cmt

Marcin Dudek · Published 2022-05-16 · Updated 2022-07-29 · CVE-2021-27444

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Weintek cMT (affected versions not specified)

Description The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2021-27444

Affected Products

Weintek Cmt

References · 7

• https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27444 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27444 · Security Note
• https://t.me/cvenotify/30713 · Telegram Post
• https://t.me/cibsecurity/42775 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-21-082-01 · Note
• https://t.me/cvenotify/30285 · Telegram Post