CVE-2021-27442: Weintek Cmt-CTRL01 Firmware

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code.

Affected products

• Weintek Cmt-CTRL01 Firmware: before 20210302 (fixed in 20210302)
• Weintek Cmt-Fhd Firmware: before 20210208 (fixed in 20210208)
• Weintek Cmt-g01 Firmware: before 20210209 (fixed in 20210209)
• Weintek Cmt-g02 Firmware: before 20210209 (fixed in 20210209)
• Weintek Cmt-g03 Firmware: before 20210222 (fixed in 20210222)
• Weintek Cmt-g04 Firmware: before 20210222 (fixed in 20210222)
• Weintek Cmt-Hdm Firmware: before 20210204 (fixed in 20210204)
• Weintek Cmt-Svr-100 Firmware: before 20210305 (fixed in 20210305)
• Weintek Cmt-Svr-102 Firmware: before 20210305 (fixed in 20210305)
• Weintek Cmt-Svr-200 Firmware: before 20210305 (fixed in 20210305)
• Weintek Cmt-Svr-202 Firmware: before 20210305 (fixed in 20210305)
• Weintek CMT3071 Firmware: before 20210218 (fixed in 20210218)
• Weintek CMT3072 Firmware: before 20210218 (fixed in 20210218)
• Weintek CMT3090 Firmware: before 20210218 (fixed in 20210218)
• Weintek CMT3103 Firmware: before 20210218 (fixed in 20210218)
• Weintek CMT3151 Firmware: before 20210218 (fixed in 20210218)

Published 2022-05-16. Last modified 2026-06-17.