GCVE - cpe:2.3:a:weintek:cmt-ctrl01:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:weintek:cmt-ctrl01:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Weintek (`b4691633-4eb4-52d5-bc64-ee82eca3c353`)
Product	Cmt Ctrl01 (`c30e92a9-e92d-55c7-9013-0e50250b567c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-14751`	vulnerable	2026-06-03 14:58:55.907085	Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege escalation. Published: 2026-01-22T21:42:50.871Z Updated: 2026-01-26T21:02:09.222Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-05	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14750`	vulnerable	2026-06-03 14:58:55.906610	External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. A low-privileged user can modify the parameters and potentially manipulate account-level privileges. Published: 2026-01-22T21:40:56.977Z Updated: 2026-01-26T21:01:31.626Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-05	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-27446`	vulnerable	2026-06-03 14:44:15.954480	Weintek EasyWeb cMT Code Injection CRITICAL (10) The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system. Published: 2022-05-16T17:15:44.847Z Updated: 2025-04-16T16:21:16.549Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01 https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-27444`	vulnerable	2026-06-03 14:44:15.945033	Weintek EasyWeb cMT Improper Access Control CRITICAL (9.8) The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator. Published: 2022-05-16T17:15:15.597Z Updated: 2025-04-16T16:21:25.289Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01 https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-27442`	vulnerable	2026-06-03 14:44:15.915430	Weintek EasyWeb cMT Cross-site Scripting CRITICAL (9.4) The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code. Published: 2022-05-16T17:13:17.743Z Updated: 2025-04-16T16:21:32.645Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01 https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.