{"containers": {"cna": {"affected": [{"product": "cMT-SVR-1xx/2xx", "vendor": "Weintek", "versions": [{"lessThan": "20210305", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "cMT-G01/G02", "vendor": "Weintek", "versions": [{"lessThan": "20210209", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "cMT-G03/G04", "vendor": "Weintek", "versions": [{"lessThan": "20210222", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "cMT3071/cMT3072/cMT3090/cMT3103/cMT3151", "vendor": "Weintek", "versions": [{"lessThan": "20210218", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "cMT-HDM", "vendor": "Weintek", "versions": [{"lessThan": "20210204", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "cMT-FHD", "vendor": "Weintek", "versions": [{"lessThan": "20210208", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "cMT-CTRL01", "vendor": "Weintek", "versions": [{"lessThan": "20210302", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Marcin Dudek from CERT.PL reported these vulnerabilities to CISA."}], "datePublic": "2021-03-23T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-284", "description": "CWE-284: Improper Access Control", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-05-16T17:15:15.000Z", "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf"}], "solutions": [{"lang": "en", "value": "Weintek has released OS upgrades for the affected products. Refer to Weintek\u2019s Technical Notice regarding these vulnerabilities.\nhttps://www.weintek.com/globalw/Download/Download.aspx\nhttps://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf"}], "source": {"discovery": "EXTERNAL"}, "title": "Weintek EasyWeb cMT Improper Access Control", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "ics-cert@hq.dhs.gov", "DATE_PUBLIC": "2021-03-23T17:00:00.000Z", "ID": "CVE-2021-27444", "STATE": "PUBLIC", "TITLE": "Weintek EasyWeb cMT Improper Access Control"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "cMT-SVR-1xx/2xx", "version": {"version_data": [{"version_affected": "<", "version_value": "20210305"}]}}, {"product_name": "cMT-G01/G02", "version": {"version_data": [{"version_affected": "<", "version_value": "20210209"}]}}, {"product_name": "cMT-G03/G04", "version": {"version_data": [{"version_affected": "<", "version_value": "20210222"}]}}, {"product_name": "cMT3071/cMT3072/cMT3090/cMT3103/cMT3151", "version": {"version_data": [{"version_affected": "<", "version_value": "20210218"}]}}, {"product_name": "cMT-HDM", "version": {"version_data": [{"version_affected": "<", "version_value": "20210204"}]}}, {"product_name": "cMT-FHD", "version": {"version_data": [{"version_affected": "<", "version_value": "20210208"}]}}, {"product_name": "cMT-CTRL01", "version": {"version_data": [{"version_affected": "<", "version_value": "20210302"}]}}]}, "vendor_name": "Weintek"}]}}, "credit": [{"lang": "eng", "value": "Marcin Dudek from CERT.PL reported these vulnerabilities to CISA."}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-284: Improper Access Control"}]}]}, "references": {"reference_data": [{"name": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01", "refsource": "MISC", "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01"}, {"name": "https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf", "refsource": "CONFIRM", "url": "https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf"}]}, "solution": [{"lang": "en", "value": "Weintek has released OS upgrades for the affected products. Refer to Weintek\u2019s Technical Notice regarding these vulnerabilities.\nhttps://www.weintek.com/globalw/Download/Download.aspx\nhttps://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf"}], "source": {"discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T20:48:17.213Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-16T15:54:59.080295Z", "id": "CVE-2021-27444", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-16T16:21:25.289Z"}}]}, "cveMetadata": {"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2021-27444", "datePublished": "2022-05-16T17:15:15.597Z", "dateReserved": "2021-02-19T00:00:00.000Z", "dateUpdated": "2025-04-16T16:21:25.289Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf", "tags": ["x_refsource_CONFIRM", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T20:48:17.213Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-27444", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-04-16T15:54:59.080295Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-16T15:55:01.528Z"}}], "cna": {"title": "Weintek EasyWeb cMT Improper Access Control", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "value": "Marcin Dudek from CERT.PL reported these vulnerabilities to CISA."}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Weintek", "product": "cMT-SVR-1xx/2xx", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "20210305", "versionType": "custom"}]}, {"vendor": "Weintek", "product": "cMT-G01/G02", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "20210209", "versionType": "custom"}]}, {"vendor": "Weintek", "product": "cMT-G03/G04", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "20210222", "versionType": "custom"}]}, {"vendor": "Weintek", "product": "cMT3071/cMT3072/cMT3090/cMT3103/cMT3151", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "20210218", "versionType": "custom"}]}, {"vendor": "Weintek", "product": "cMT-HDM", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "20210204", "versionType": "custom"}]}, {"vendor": "Weintek", "product": "cMT-FHD", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "20210208", "versionType": "custom"}]}, {"vendor": "Weintek", "product": "cMT-CTRL01", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "20210302", "versionType": "custom"}]}], "solutions": [{"lang": "en", "value": "Weintek has released OS upgrades for the affected products. Refer to Weintek\u2019s Technical Notice regarding these vulnerabilities.\nhttps://www.weintek.com/globalw/Download/Download.aspx\nhttps://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf"}], "datePublic": "2021-03-23T00:00:00.000Z", "references": [{"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01", "tags": ["x_refsource_MISC"]}, {"url": "https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf", "tags": ["x_refsource_CONFIRM"]}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "descriptions": [{"lang": "en", "value": "The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control"}]}], "providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2022-05-16T17:15:15.000Z"}, "x_legacyV4Record": {"credit": [{"lang": "eng", "value": "Marcin Dudek from CERT.PL reported these vulnerabilities to CISA."}], "impact": {"cvss": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, "source": {"discovery": "EXTERNAL"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "20210305", "version_affected": "<"}]}, "product_name": "cMT-SVR-1xx/2xx"}, {"version": {"version_data": [{"version_value": "20210209", "version_affected": "<"}]}, "product_name": "cMT-G01/G02"}, {"version": {"version_data": [{"version_value": "20210222", "version_affected": "<"}]}, "product_name": "cMT-G03/G04"}, {"version": {"version_data": [{"version_value": "20210218", "version_affected": "<"}]}, "product_name": "cMT3071/cMT3072/cMT3090/cMT3103/cMT3151"}, {"version": {"version_data": [{"version_value": "20210204", "version_affected": "<"}]}, "product_name": "cMT-HDM"}, {"version": {"version_data": [{"version_value": "20210208", "version_affected": "<"}]}, "product_name": "cMT-FHD"}, {"version": {"version_data": [{"version_value": "20210302", "version_affected": "<"}]}, "product_name": "cMT-CTRL01"}]}, "vendor_name": "Weintek"}]}}, "solution": [{"lang": "en", "value": "Weintek has released OS upgrades for the affected products. Refer to Weintek\u2019s Technical Notice regarding these vulnerabilities.\nhttps://www.weintek.com/globalw/Download/Download.aspx\nhttps://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf"}], "data_type": "CVE", "generator": {"engine": "Vulnogram 0.0.9"}, "references": {"reference_data": [{"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01", "name": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01", "refsource": "MISC"}, {"url": "https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf", "name": "https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf", "refsource": "CONFIRM"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-284: Improper Access Control"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2021-27444", "STATE": "PUBLIC", "TITLE": "Weintek EasyWeb cMT Improper Access Control", "ASSIGNER": "ics-cert@hq.dhs.gov", "DATE_PUBLIC": "2021-03-23T17:00:00.000Z"}}}}, "cveMetadata": {"cveId": "CVE-2021-27444", "state": "PUBLISHED", "dateUpdated": "2025-04-16T16:21:25.289Z", "dateReserved": "2021-02-19T00:00:00.000Z", "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "datePublished": "2022-05-16T17:15:15.597Z", "assignerShortName": "icscert"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt-svr-100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2BD9FCBF-CD84-4863-A4E4-613BD228D2CA", "versionEndExcluding": "20210305", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt-svr-100:-:*:*:*:*:*:*:*", "matchCriteriaId": "408166F7-5030-4FDA-94CF-4DD2237A1EA7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt-svr-102_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E6D1FD50-6AD9-4F6F-84A2-1646542350CC", "versionEndExcluding": "20210305", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt-svr-102:-:*:*:*:*:*:*:*", "matchCriteriaId": "5EE3CBE0-6B56-4405-91E2-15DB0C6E7967", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt-svr-200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "176DF351-ECB2-44F8-9009-48B76D9EB867", "versionEndExcluding": "20210305", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt-svr-200:-:*:*:*:*:*:*:*", "matchCriteriaId": "673841CB-C2D6-486C-8C5D-0180173196D9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt-svr-202_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A7AA6AD2-B144-437E-B185-4BD47703A54B", "versionEndExcluding": "20210305", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt-svr-202:-:*:*:*:*:*:*:*", "matchCriteriaId": "AB57299A-5F53-44A5-B1D3-2E554180562B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt-g01_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5985D77C-E9BF-4E1B-8128-A0737281B8FA", "versionEndExcluding": "20210209", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt-g01:-:*:*:*:*:*:*:*", "matchCriteriaId": "E0ADA01D-E62C-4D53-B70D-BFB750CA2B52", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt-g02_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0BF566CC-966E-48E9-B6C9-F6CA52FFEAA1", "versionEndExcluding": "20210209", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt-g02:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FB93C5F-4C71-4337-B72F-FE9B6E5CF83C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt-g03_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F59201D7-3D0B-446F-90B9-FD19C9DB04C0", "versionEndExcluding": "20210222", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt-g03:-:*:*:*:*:*:*:*", "matchCriteriaId": "61343FB6-5943-4FE7-9E3C-56F184622B7B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt-g04_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F264AD39-4A3F-4273-A951-6DCB6768E82F", "versionEndExcluding": "20210222", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt-g04:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2BCB236-F9AC-4729-BCAF-F005250C0F2E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt3071_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "37D305D8-34F6-4BEF-99D4-CF4A18EFA9D3", "versionEndExcluding": "20210218", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt3071:-:*:*:*:*:*:*:*", "matchCriteriaId": "A4DE53C8-09D5-4D5E-97EE-A89E1478CD65", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt3072_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8A20906F-F91F-486A-9340-8D22C93C19AE", "versionEndExcluding": "20210218", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt3072:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3F83A8D-1489-48AA-911B-5BA561A57896", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt3090_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A84ABF9C-EC9B-4CBF-967F-5F38DCD32A16", "versionEndExcluding": "20210218", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt3090:-:*:*:*:*:*:*:*", "matchCriteriaId": "79C1F694-08A2-46E7-95C2-8DFA3D64423B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt3103_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B70E20F8-83E0-45C9-B02F-D1957AD47C6A", "versionEndExcluding": "20210218", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt3103:-:*:*:*:*:*:*:*", "matchCriteriaId": "F607716E-7B7B-4620-819C-F44341B8C37F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt3151_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F5065F83-0BD0-44B1-9E64-8689F0F3B4D0", "versionEndExcluding": "20210218", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt3151:-:*:*:*:*:*:*:*", "matchCriteriaId": "9FF5326B-5E33-4C11-9AC6-A90357078FCA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt-hdm_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0A793B51-28F7-4A17-BD4C-74C2FCA053FC", "versionEndExcluding": "20210204", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt-hdm:-:*:*:*:*:*:*:*", "matchCriteriaId": "E08E3518-A03F-486D-B67A-013F67026D78", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt-fhd_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "81DBEE28-6A04-43E0-9C5E-592162179896", "versionEndExcluding": "20210208", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt-fhd:-:*:*:*:*:*:*:*", "matchCriteriaId": "A132B170-A1FC-4D38-9965-0FF47B944FD5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weintek:cmt-ctrl01_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "38F4698D-B9D6-42E4-9867-9BDCC2F2F2A8", "versionEndExcluding": "20210302", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weintek:cmt-ctrl01:-:*:*:*:*:*:*:*", "matchCriteriaId": "1C9CB899-1EE6-4599-861D-9BBA4856E5CE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator."}, {"lang": "es", "value": "La l\u00ednea de productos Weintek cMT es vulnerable a varios controles de acceso inapropiados, que pueden permitir a un atacante no autenticado acceder y descargar remotamente informaci\u00f3n confidencial y llevar a cabo acciones administrativas en nombre de un administrador leg\u00edtimo"}], "id": "CVE-2021-27444", "lastModified": "2024-11-21T05:57:59.987", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-05-16T18:15:08.110", "references": [{"source": "ics-cert@hq.dhs.gov", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf"}, {"source": "ics-cert@hq.dhs.gov", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}