Critical severity9.8NVD Advisory· Published May 16, 2022· Updated Jun 17, 2026

CVE-2021-27444

Description

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.

Affected products

Weintek/cMTllm-fuzzy
Weintek/cMT3071/cMT3072/cMT3090/cMT3103/cMT3151v5
Range: unspecified
Weintek/cMT-CTRL01v5
Range: unspecified
Weintek/cMT-FHDv5
Range: unspecified
Weintek/cMT-G01/G02v5
Range: unspecified
Weintek/cMT-G03/G04v5
Range: unspecified
Weintek/cMT-HDMv5
Range: unspecified
Weintek/cMT-SVR-1xx/2xxv5
Range: unspecified

Patches

Vulnerability mechanics

References

dl.weintek.com/public/Document/TEC/TEC21001E_cMT_EasyWeb_V1_Security_Issues.pdfnvdMitigationVendor Advisory
www.cisa.gov/uscert/ics/advisories/icsa-21-082-01nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000