Skip to content
OpenAdvisories

Product · Weintek

cMT-CTRL01

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2025-14751

    Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service

    A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege escalation.

    Weintek cMT-CTRL01 cMT3072XH(T) cMT3072XH
  • High 8.7
    CVE-2025-14750

    External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service

    The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. A low-privileged user can modify the parameters and potentially manipulate account-level privileges.

    Weintek cMT-CTRL01 cMT3072XH(T) cMT3072XH