Skip to content
OpenAdvisories
High · 8.8 CVE-2023-40145 EUVD-2023-44752GHSA-rqj6-qq4v-5w96

Weintek cMT3000 HMI Web CGI OS Command Injection

Published Oct 19, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Vendor: Weintek Product: cMT-FHD Product: cMT-HDM Product: cMT3071 Product: cMT3072 Product: cMT3090 Product: cMT3103 Product: cMT3151

Description

In Weintek's cMT3000 HMI Web CGI device, an anonymous attacker can execute arbitrary commands after login to the device.

Affected products

VendorProductAffectedFixed
Weintek cMT-FHD ≤ 20210210 —
Weintek cMT-HDM ≤ 20210204 —
Weintek cMT3071 ≤ 20210218 —
Weintek cMT3072 ≤ 20210218 —
Weintek cMT3103 ≤ 20210218 —
Weintek cMT3090 ≤ 20210218 —
Weintek cMT3151 ≤ 20210218 —

Advisories 1

References