CVE-2021-27446: Weintek Cmt-CTRL01 Firmware

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.

Affected products

• Weintek Cmt-CTRL01 Firmware: before 20210302 (fixed in 20210302)
• Weintek Cmt-Fhd Firmware: before 20210208 (fixed in 20210208)
• Weintek Cmt-g01 Firmware: before 20210209 (fixed in 20210209)
• Weintek Cmt-g02 Firmware: before 20210209 (fixed in 20210209)
• Weintek Cmt-g03 Firmware: before 20210222 (fixed in 20210222)
• Weintek Cmt-g04 Firmware: before 20210222 (fixed in 20210222)
• Weintek Cmt-Hdm Firmware: before 20210204 (fixed in 20210204)
• Weintek Cmt-Svr-100 Firmware: before 20210305 (fixed in 20210305)
• Weintek Cmt-Svr-102 Firmware: before 20210305 (fixed in 20210305)
• Weintek Cmt-Svr-200 Firmware: before 20210305 (fixed in 20210305)
• Weintek Cmt-Svr-202 Firmware: before 20210305 (fixed in 20210305)
• Weintek CMT3071 Firmware: before 20210218 (fixed in 20210218)
• Weintek CMT3072 Firmware: before 20210218 (fixed in 20210218)
• Weintek CMT3090 Firmware: before 20210218 (fixed in 20210218)
• Weintek CMT3103 Firmware: before 20210218 (fixed in 20210218)
• Weintek CMT3151 Firmware: before 20210218 (fixed in 20210218)

Published 2022-05-16. Last modified 2026-06-17.