Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-14750

External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. A low-privileged user can modify the parameters and potentially manipulate account-level privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Weintek cMT3072XH

Default version status: unaffected

  • 20200630 to < 20241112affected

Weintek cMT3072XH(T)

Default version status: unaffected

  • 20200630 to < 20241112affected

Weintek cMT-SVRX-820

Default version status: unaffected

  • 20220413 to < 20240919affected

Weintek cMT-CTRL01

Default version status: unaffected

  • 20230308 to < 20250827affected

References