Vendor
Weintek
18 known vulnerabilities.
Products
8 results · Clear filters · Feed
-
High 8.8
Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision
Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.
-
High 8.8
Weintek cMT3092X Incorrect Permission Assignment for Critical Resource
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.
-
High 8.7
Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service
A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege escalation.
-
High 8.7
External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service
The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. A low-privileged user can modify the parameters and potentially manipulate account-level privileges.
-
High 8.8
Weintek cMT3000 HMI Web CGI OS Command Injection
In Weintek's cMT3000 HMI Web CGI device, an anonymous attacker can execute arbitrary commands after login to the device.
-
High 7.2
Weintek Weincloud Improper Authentication
Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credentials to the official website.
-
High 7.5
Weintek Weincloud Improper Handling of Structural Elements
Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.
-
High 7.4
Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password
Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token only.