CVE-2021-27446
Weintek EasyWeb cMT Code Injection
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Weintek EasyWeb cMT Code Injection
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
- Record
CVE-2021-27446- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
EUVDEUVD-2021-14200
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
- Record
EUVD-2021-14200- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-7r8g-jh99-cmrq
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated...
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
- Record
GHSA-7r8g-jh99-cmrq- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
NVD
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
- Record
CVE-2021-27446- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
- weintek cmt-ctrl01
- weintek cmt-ctrl01 firmware
- weintek cmt-fhd
- weintek cmt-fhd firmware
- weintek cmt-g01/g02
- weintek cmt-g01 firmware
- weintek cmt-g02 firmware
- weintek cmt-g03/g04
- weintek cmt-g03 firmware
- weintek cmt-g04 firmware
- weintek cmt-hdm
- weintek cmt-hdm firmware
Show 11 moreShow less
- weintek cmt-svr-100 firmware
- weintek cmt-svr-102 firmware
- weintek cmt-svr-1xx/2xx
- weintek cmt-svr-200 firmware
- weintek cmt-svr-202 firmware
- weintek cmt3071/cmt3072/cmt3090/cmt3103/cmt3151
- weintek cmt3071 firmware
- weintek cmt3072 firmware
- weintek cmt3090 firmware
- weintek cmt3103 firmware
- weintek cmt3151 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-27446 is a critical vulnerability (CVSS 10.0) in Weintek Cmt-ctrl01, published May 16, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.97%, the 87th percentile. No source names a fixed version.