CVE-2023-40145: Weintek Cmt-Fhd Firmware

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In Weintek's cMT3000 HMI Web CGI device, an anonymous attacker can execute arbitrary commands after login to the device.

Affected products

• Weintek Cmt-Fhd Firmware: before 20210212 (fixed in 20210212)
• Weintek Cmt-Hdm Firmware: before 20210206 (fixed in 20210206)
• Weintek CMT3071 Firmware: before 20210220 (fixed in 20210220)
• Weintek CMT3072 Firmware: before 20210220 (fixed in 20210220)
• Weintek CMT3090 Firmware: before 20210220 (fixed in 20210220)
• Weintek CMT3103 Firmware: before 20210220 (fixed in 20210220)
• Weintek CMT3151 Firmware: before 20210220 (fixed in 20210220)

Published 2023-10-19. Last modified 2026-06-17.