Weintek Cmt-CTRL01 Firmware vulnerabilities

3 CVEs affecting Weintek Cmt-CTRL01 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-27446, published 2022-05-16.

More from Weintek.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-27446, published 2022-05-16. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
• CVE-2021-27444, published 2022-05-16. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform…
• CVE-2021-27442, published 2022-05-16. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code.