Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-14751

Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege escalation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Weintek cMT3072XH

Default version status: unaffected

  • 20200630 to < 20241112affected

Weintek cMT3072XH(T)

Default version status: unaffected

  • 20200630 to < 20241112affected

Weintek cMT-SVRX-820

Default version status: unaffected

  • 20220413 to < 20240919affected

Weintek cMT-CTRL01

Default version status: unaffected

  • 20230308 to < 20250827affected

References