ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-27444

—
CVSS 3.1
9.8 critical
EPSS
1%p65
Published
()
Modified
Description

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.

Vendors
weintek
Products
cmt-svr-100 firmware, cmt-svr-102 firmware, cmt-svr-200 firmware, cmt-svr-202 firmware, cmt-g01 firmware, cmt-g02 firmware, cmt-g03 firmware, cmt-g04 firmware, cmt3071 firmware, cmt3072 firmware, cmt3090 firmware, cmt3103 firmware
Weakness
CWE-284
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news

No ingested article mentions this CVE yet.