VULNERABILITY INTELLIGENCE

CVE-2021-27444

CVSS score9.8 CRITICAL

EPSS probability1.18%

CISA KEVNot currently listed

Published2022-05-16

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.

Weakness classification

ics-cert@hq.dhs.gov: CWE-284
nvd@nist.gov: NVD-CWE-Other

Primary references

ics-cert@hq.dhs.gov — Mitigation, Vendor Advisory
ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource