Fiche vulnérabilité
CVE-2021-27444 : faille critique weintek cmt-svr-100 firmware (CVSS 9.8)
Description
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.
En bref
- Sévérité
- Critique (CVSS 9.8)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 16 mai 2022
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- weintek cmt-svr-100 firmware
- weintek cmt-svr-102 firmware
- weintek cmt-svr-200 firmware
- weintek cmt-svr-202 firmware
- weintek cmt-g01 firmware
- weintek cmt-g02 firmware
- weintek cmt-g03 firmware
- weintek cmt-g04 firmware
- weintek cmt3071 firmware
- weintek cmt3072 firmware
- weintek cmt3090 firmware
- weintek cmt3103 firmware
- weintek cmt3151 firmware
- weintek cmt-hdm firmware
- weintek cmt-fhd firmware
- weintek cmt-ctrl01 firmware