CVE-2021-27444
Weintek EasyWeb cMT Improper Access Control
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Weintek EasyWeb cMT Improper Access Control
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.
- Record
CVE-2021-27444- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-284
- Updated
- 2026-11-02
EUVDEUVD-2021-14198
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.
- Record
EUVD-2021-14198- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-f29h-wrwj-qwp2
The Weintek cMT product line is vulnerable to various improper access controls, which may allow...
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.
- Record
GHSA-f29h-wrwj-qwp2- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-284, CWE-287
- Updated
- 2026-11-02
NVD
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.
- Record
CVE-2021-27444- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-284
- Updated
- 2026-11-02
Affected products
- weintek cmt-ctrl01
- weintek cmt-ctrl01 firmware
- weintek cmt-fhd
- weintek cmt-fhd firmware
- weintek cmt-g01/g02
- weintek cmt-g01 firmware
- weintek cmt-g02 firmware
- weintek cmt-g03/g04
- weintek cmt-g03 firmware
- weintek cmt-g04 firmware
- weintek cmt-hdm
- weintek cmt-hdm firmware
Show 11 moreShow less
- weintek cmt-svr-100 firmware
- weintek cmt-svr-102 firmware
- weintek cmt-svr-1xx/2xx
- weintek cmt-svr-200 firmware
- weintek cmt-svr-202 firmware
- weintek cmt3071/cmt3072/cmt3090/cmt3103/cmt3151
- weintek cmt3071 firmware
- weintek cmt3072 firmware
- weintek cmt3090 firmware
- weintek cmt3103 firmware
- weintek cmt3151 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-27444 is a critical vulnerability (CVSS 9.8) in Weintek Cmt-ctrl01, published May 16, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. No source names a fixed version.