Description
In Weintek's cMT3000 HMI Web CGI device, the cgi-bin command_wb.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Weintek | cMT-FHD | ≤ 20210210 | — |
| Weintek | cMT-HDM | ≤ 20210204 | — |
| Weintek | cMT3071 | ≤ 20210218 | — |
| Weintek | cMT3072 | ≤ 20210218 | — |
| Weintek | cMT3103 | ≤ 20210218 | — |
| Weintek | cMT3090 | ≤ 20210218 | — |
| Weintek | cMT3151 | ≤ 20210218 | — |
Advisories 1
- ICSA-23-285-12 Weintek cMT3000 HMI Web CGI CISA ICS & IT advisories · Oct 12, 2023