Critical severity9.4NVD Advisory· Published May 16, 2022· Updated Jun 17, 2026

CVE-2021-27442

Description

The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code.

Affected products

Weintek/cMTllm-fuzzy
Weintek/cMT3071/cMT3072/cMT3090/cMT3103/cMT3151v5
Range: unspecified
Weintek/cMT-CTRL01v5
Range: unspecified
Weintek/cMT-FHDv5
Range: unspecified
Weintek/cMT-G01/G02v5
Range: unspecified
Weintek/cMT-G03/G04v5
Range: unspecified
Weintek/cMT-HDMv5
Range: unspecified
Weintek/cMT-SVR-1xx/2xxv5
Range: unspecified

Patches

Vulnerability mechanics

References

dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdfnvdMitigationVendor Advisory
www.cisa.gov/uscert/ics/advisories/icsa-21-082-01nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.611
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000