CVE-2021-27444: Weintek cMT-SVR-1xx/2xx, заобикаляне на вход и права

Описание

Оригинално описание

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.

Засегнати продукти

• Weintek cMT-SVR-1xx/2xx: unspecified преди 20210305
• Weintek cMT-G01/G02: unspecified преди 20210209
• Weintek cMT-G03/G04: unspecified преди 20210222
• Weintek cMT3071/cMT3072/cMT3090/cMT3103/cMT3151: unspecified преди 20210218
• Weintek cMT-HDM: unspecified преди 20210204
• Weintek cMT-FHD: unspecified преди 20210208
• Weintek cMT-CTRL01: unspecified преди 20210302

Вид слабост

• CWE-284 Неправилен контрол на достъпа

История

Други уязвимости в Weintek cMT-SVR-1xx/2xx

• 8.7CVE-2025-14751
• 8.7CVE-2025-14750
• 9.8CVE-2023-43492
• 8.8CVE-2023-40145
• 9.8CVE-2023-38584

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-27444
• https://nvd.nist.gov/vuln/detail/CVE-2021-27444
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01
• https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf