Advisories · Technology

Weintek cMT3071/cMT3072/cMT3090/cMT3103/cMT3151.

Every CVE that names Weintek cMT3071/cMT3072/cMT3090/cMT3103/cMT3151 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-27446 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Weintek EasyWeb cMT Code Injection
- Weintek cMT-SVR-1xx/2xx
- Weintek cMT-G01/G02
- Code injection
Not analysed yet 16 May 2022
CVE-2021-27444 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Weintek EasyWeb cMT Improper Access Control
- Weintek cMT-SVR-1xx/2xx
- Weintek cMT-G01/G02
- Broken access control
Not analysed yet 16 May 2022
CVE-2021-27442 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Weintek EasyWeb cMT Cross-site Scripting
- Weintek cMT-SVR-1xx/2xx
- Weintek cMT-G01/G02
- Cross-site scripting (XSS)
Not analysed yet 16 May 2022