Description
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Weintek | cMT-SVR-1xx/2xx | unspecified – < 20210305 | 20210305 |
| Weintek | cMT-G01/G02 | unspecified – < 20210209 | 20210209 |
| Weintek | cMT-G03/G04 | unspecified – < 20210222 | 20210222 |
| Weintek | cMT3071/cMT3072/cMT3090/cMT3103/cMT3151 | unspecified – < 20210218 | 20210218 |
| Weintek | cMT-HDM | unspecified – < 20210204 | 20210204 |
| Weintek | cMT-FHD | unspecified – < 20210208 | 20210208 |
| Weintek | cMT-CTRL01 | unspecified – < 20210302 | 20210302 |
Advisories 1
- ICSA-21-082-01 Weintek EasyWeb cMT CISA ICS & IT advisories · Mar 23, 2021