Description (CNA)
In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Weintek / cMT-FHD | affected 0 through 20210210 |
| Weintek / cMT-HDM | affected 0 through 20210204 |
| Weintek / cMT3071 | affected 0 through 20210218 |
| Weintek / cMT3072 | affected 0 through 20210218 |
| Weintek / cMT3103 | affected 0 through 20210218 |
| Weintek / cMT3090 | affected 0 through 20210218 |
| Weintek / cMT3151 | affected 0 through 20210218 |
CWE
CWE-121
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-285-12
- https://dl.weintek.com/public/Document/TEC/TEC23005E_cMT_Web_Security_Update.pdf
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.