Critical severity9.4NVD Advisory· Published May 16, 2022· Updated Jun 17, 2026

CVE-2021-27442

Description

The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code.

Affected products

Weintek/cMT-SVR-1xx/2xxv5
Range: unspecified
Weintek/cMT-G01/G02v5
Range: unspecified
Weintek/cMT-G03/G04v5
Range: unspecified
Weintek/cMT3071/cMT3072/cMT3090/cMT3103/cMT3151v5
Range: unspecified
Weintek/cMT-HDMv5
Range: unspecified
Weintek/cMT-FHDv5
Range: unspecified
Weintek/cMT-CTRL01v5
Range: unspecified
Weintek/cMTllm-fuzzy
Weintek/Cmt Svr 100 Firmware
cpe:2.3:o:weintek:cmt-svr-100_firmware:*:*:*:*:*:*:*:*
Range: <20210305
Weintek/Cmt Svr 102 Firmware
cpe:2.3:o:weintek:cmt-svr-102_firmware:*:*:*:*:*:*:*:*
Range: <20210305
Weintek/Cmt Svr 200 Firmware
cpe:2.3:o:weintek:cmt-svr-200_firmware:*:*:*:*:*:*:*:*
Range: <20210305
Weintek/Cmt Svr 202 Firmware
cpe:2.3:o:weintek:cmt-svr-202_firmware:*:*:*:*:*:*:*:*
Range: <20210305
Weintek/Cmt G01 Firmware
cpe:2.3:o:weintek:cmt-g01_firmware:*:*:*:*:*:*:*:*
Range: <20210209
Weintek/Cmt G02 Firmware
cpe:2.3:o:weintek:cmt-g02_firmware:*:*:*:*:*:*:*:*
Range: <20210209
Weintek/Cmt G03 Firmware
cpe:2.3:o:weintek:cmt-g03_firmware:*:*:*:*:*:*:*:*
Range: <20210222
Weintek/Cmt G04 Firmware
cpe:2.3:o:weintek:cmt-g04_firmware:*:*:*:*:*:*:*:*
Range: <20210222
Weintek/Cmt3071 Firmware
cpe:2.3:o:weintek:cmt3071_firmware:*:*:*:*:*:*:*:*
Range: <20210218
Weintek/Cmt3072 Firmware
cpe:2.3:o:weintek:cmt3072_firmware:*:*:*:*:*:*:*:*
Range: <20210218
Weintek/Cmt3090 Firmware
cpe:2.3:o:weintek:cmt3090_firmware:*:*:*:*:*:*:*:*
Range: <20210218
Weintek/Cmt3103 Firmware
cpe:2.3:o:weintek:cmt3103_firmware:*:*:*:*:*:*:*:*
Range: <20210218
Weintek/Cmt3151 Firmware
cpe:2.3:o:weintek:cmt3151_firmware:*:*:*:*:*:*:*:*
Range: <20210218
Weintek/Cmt Hdm Firmware
cpe:2.3:o:weintek:cmt-hdm_firmware:*:*:*:*:*:*:*:*
Range: <20210204
Weintek/Cmt Fhd Firmware
cpe:2.3:o:weintek:cmt-fhd_firmware:*:*:*:*:*:*:*:*
Range: <20210208
Weintek/Cmt Ctrl01 Firmware
cpe:2.3:o:weintek:cmt-ctrl01_firmware:*:*:*:*:*:*:*:*
Range: <20210302

Patches

Vulnerability mechanics

References

dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdfnvdMitigationVendor Advisory
www.cisa.gov/uscert/ics/advisories/icsa-21-082-01nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.611
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000