Description (CNA)
The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Weintek / cMT-SVR-1xx/2xx | affected unspecified before 20210305 |
| Weintek / cMT-G01/G02 | affected unspecified before 20210209 |
| Weintek / cMT-G03/G04 | affected unspecified before 20210222 |
| Weintek / cMT3071/cMT3072/cMT3090/cMT3103/cMT3151 | affected unspecified before 20210218 |
| Weintek / cMT-HDM | affected unspecified before 20210204 |
| Weintek / cMT-FHD | affected unspecified before 20210208 |
| Weintek / cMT-CTRL01 | affected unspecified before 20210302 |
CWE
CWE-79
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-082-01
- https://dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdf
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.