Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-40145

Weintek cMT3000 HMI Web CGI OS Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

In Weintek's cMT3000 HMI Web CGI device, an anonymous attacker can execute arbitrary commands after login to the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Weintek cMT-FHD

Default version status: unaffected

  • 0 to ≤ 20210210 affected

Weintek cMT-HDM

Default version status: unaffected

  • 0 to ≤ 20210204 affected

Weintek cMT3071

Default version status: unaffected

  • 0 to ≤ 20210218affected

Weintek cMT3072

Default version status: unaffected

  • 0 to ≤ 20210218affected

Weintek cMT3103

Default version status: unaffected

  • 0 to ≤ 20210218affected

Weintek cMT3090

Default version status: unaffected

  • 0 to ≤ 20210218affected

Weintek cMT3151

Default version status: unaffected

  • 0 to ≤ 20210218affected

References