FKIE_CVE-2021-27444

Vulnerability from fkie_nvd - Published: 2022-05-16 18:15 - Updated: 2024-11-21 05:57
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.
References
ics-cert@hq.dhs.govhttps://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdfMitigation, Vendor Advisory
ics-cert@hq.dhs.govhttps://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdfMitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01Third Party Advisory, US Government Resource
Impacted products
Vendor Product Version
weintek cmt-svr-100_firmware *
weintek cmt-svr-100 -
weintek cmt-svr-102_firmware *
weintek cmt-svr-102 -
weintek cmt-svr-200_firmware *
weintek cmt-svr-200 -
weintek cmt-svr-202_firmware *
weintek cmt-svr-202 -
weintek cmt-g01_firmware *
weintek cmt-g01 -
weintek cmt-g02_firmware *
weintek cmt-g02 -
weintek cmt-g03_firmware *
weintek cmt-g03 -
weintek cmt-g04_firmware *
weintek cmt-g04 -
weintek cmt3071_firmware *
weintek cmt3071 -
weintek cmt3072_firmware *
weintek cmt3072 -
weintek cmt3090_firmware *
weintek cmt3090 -
weintek cmt3103_firmware *
weintek cmt3103 -
weintek cmt3151_firmware *
weintek cmt3151 -
weintek cmt-hdm_firmware *
weintek cmt-hdm -
weintek cmt-fhd_firmware *
weintek cmt-fhd -
weintek cmt-ctrl01_firmware *
weintek cmt-ctrl01 -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt-svr-100_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2BD9FCBF-CD84-4863-A4E4-613BD228D2CA",
              "versionEndExcluding": "20210305",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt-svr-100:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "408166F7-5030-4FDA-94CF-4DD2237A1EA7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt-svr-102_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6D1FD50-6AD9-4F6F-84A2-1646542350CC",
              "versionEndExcluding": "20210305",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt-svr-102:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5EE3CBE0-6B56-4405-91E2-15DB0C6E7967",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt-svr-200_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "176DF351-ECB2-44F8-9009-48B76D9EB867",
              "versionEndExcluding": "20210305",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt-svr-200:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "673841CB-C2D6-486C-8C5D-0180173196D9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt-svr-202_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7AA6AD2-B144-437E-B185-4BD47703A54B",
              "versionEndExcluding": "20210305",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt-svr-202:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB57299A-5F53-44A5-B1D3-2E554180562B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt-g01_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5985D77C-E9BF-4E1B-8128-A0737281B8FA",
              "versionEndExcluding": "20210209",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt-g01:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0ADA01D-E62C-4D53-B70D-BFB750CA2B52",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt-g02_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BF566CC-966E-48E9-B6C9-F6CA52FFEAA1",
              "versionEndExcluding": "20210209",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt-g02:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FB93C5F-4C71-4337-B72F-FE9B6E5CF83C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt-g03_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F59201D7-3D0B-446F-90B9-FD19C9DB04C0",
              "versionEndExcluding": "20210222",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt-g03:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "61343FB6-5943-4FE7-9E3C-56F184622B7B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt-g04_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F264AD39-4A3F-4273-A951-6DCB6768E82F",
              "versionEndExcluding": "20210222",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt-g04:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2BCB236-F9AC-4729-BCAF-F005250C0F2E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt3071_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "37D305D8-34F6-4BEF-99D4-CF4A18EFA9D3",
              "versionEndExcluding": "20210218",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt3071:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4DE53C8-09D5-4D5E-97EE-A89E1478CD65",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt3072_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A20906F-F91F-486A-9340-8D22C93C19AE",
              "versionEndExcluding": "20210218",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt3072:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3F83A8D-1489-48AA-911B-5BA561A57896",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt3090_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A84ABF9C-EC9B-4CBF-967F-5F38DCD32A16",
              "versionEndExcluding": "20210218",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt3090:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "79C1F694-08A2-46E7-95C2-8DFA3D64423B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt3103_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B70E20F8-83E0-45C9-B02F-D1957AD47C6A",
              "versionEndExcluding": "20210218",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt3103:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F607716E-7B7B-4620-819C-F44341B8C37F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt3151_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5065F83-0BD0-44B1-9E64-8689F0F3B4D0",
              "versionEndExcluding": "20210218",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt3151:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FF5326B-5E33-4C11-9AC6-A90357078FCA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt-hdm_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A793B51-28F7-4A17-BD4C-74C2FCA053FC",
              "versionEndExcluding": "20210204",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt-hdm:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E08E3518-A03F-486D-B67A-013F67026D78",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt-fhd_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "81DBEE28-6A04-43E0-9C5E-592162179896",
              "versionEndExcluding": "20210208",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt-fhd:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A132B170-A1FC-4D38-9965-0FF47B944FD5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:weintek:cmt-ctrl01_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "38F4698D-B9D6-42E4-9867-9BDCC2F2F2A8",
              "versionEndExcluding": "20210302",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:weintek:cmt-ctrl01:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C9CB899-1EE6-4599-861D-9BBA4856E5CE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator."
    },
    {
      "lang": "es",
      "value": "La l\u00ednea de productos Weintek cMT es vulnerable a varios controles de acceso inapropiados, que pueden permitir a un atacante no autenticado acceder y descargar remotamente informaci\u00f3n confidencial y llevar a cabo acciones administrativas en nombre de un administrador leg\u00edtimo"
    }
  ],
  "id": "CVE-2021-27444",
  "lastModified": "2024-11-21T05:57:59.987",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "ics-cert@hq.dhs.gov",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2022-05-16T18:15:08.110",
  "references": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf"
    },
    {
      "source": "ics-cert@hq.dhs.gov",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01"
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ],
      "source": "ics-cert@hq.dhs.gov",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.