CVE-2021-27446

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 16-05-2022 08:15

Last modified: - 25-05-2022 06:13

Total changes: - 2

Description

The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

9.8

Base score

3.9

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=weintek AND product=cmt-svr-100_firmware AND versionEndExcluding=20210305

vendor=weintek AND product=cmt-svr-100 AND version=-

AND

vendor=weintek AND product=cmt-svr-102_firmware AND versionEndExcluding=20210305

vendor=weintek AND product=cmt-svr-102 AND version=-

AND

vendor=weintek AND product=cmt-svr-200_firmware AND versionEndExcluding=20210305

vendor=weintek AND product=cmt-svr-200 AND version=-

AND

vendor=weintek AND product=cmt-svr-202_firmware AND versionEndExcluding=20210305

vendor=weintek AND product=cmt-svr-202 AND version=-

AND

vendor=weintek AND product=cmt-g01_firmware AND versionEndExcluding=20210209

vendor=weintek AND product=cmt-g01 AND version=-

AND

vendor=weintek AND product=cmt-g02_firmware AND versionEndExcluding=20210209

vendor=weintek AND product=cmt-g02 AND version=-

AND

vendor=weintek AND product=cmt-g03_firmware AND versionEndExcluding=20210222

vendor=weintek AND product=cmt-g03 AND version=-

AND

vendor=weintek AND product=cmt-g04_firmware AND versionEndExcluding=20210222

vendor=weintek AND product=cmt-g04 AND version=-

AND

vendor=weintek AND product=cmt3071_firmware AND versionEndExcluding=20210218

vendor=weintek AND product=cmt3071 AND version=-

AND

vendor=weintek AND product=cmt3072_firmware AND versionEndExcluding=20210218

vendor=weintek AND product=cmt3072 AND version=-

AND

vendor=weintek AND product=cmt3090_firmware AND versionEndExcluding=20210218

vendor=weintek AND product=cmt3090 AND version=-

AND

vendor=weintek AND product=cmt3103_firmware AND versionEndExcluding=20210218

vendor=weintek AND product=cmt3103 AND version=-

AND

vendor=weintek AND product=cmt3151_firmware AND versionEndExcluding=20210218

vendor=weintek AND product=cmt3151 AND version=-

AND

vendor=weintek AND product=cmt-hdm_firmware AND versionEndExcluding=20210204

vendor=weintek AND product=cmt-hdm AND version=-

AND

vendor=weintek AND product=cmt-fhd_firmware AND versionEndExcluding=20210208

vendor=weintek AND product=cmt-fhd AND version=-

AND

vendor=weintek AND product=cmt-ctrl01_firmware AND versionEndExcluding=20210302

vendor=weintek AND product=cmt-ctrl01 AND version=-

Reference

Keywords

CVE-2021-27446

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-27446

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures