CVE-2023-43492

🗓️ 19 Oct 2023 19:28:59Reported by icscertType

In Weintek's cMT3000 HMI Web CGI device, a stack-based buffer overflow in cgi-bin codesys.cgi can allow an attacker to bypass login authentication

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of Weintek’s cMT3000 HMI Web CGI panel’s microprogramming software arises from buffer overflow in the stack. This allows a malicious actor to bypass the authentication process.	21 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-43492	20 Oct 202300:34	–	circl
CNNVD	Weintek cMT Buffer Error Vulnerability	13 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-43492 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow	19 Oct 202319:28	–	cvelist
EUVD	EUVD-2023-47907	3 Oct 202520:07	–	euvd
ICS	Weintek cMT3000 HMI Web CGI	12 Oct 202306:00	–	ics
NVD	CVE-2023-43492	19 Oct 202320:15	–	nvd
Prion	Stack overflow	19 Oct 202320:15	–	prion
Positive Technologies	PT-2023-6284 · Weintek · Cmt3000 Hmi Web Cgi	13 Oct 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-43492 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow	19 Oct 202319:28	–	vulnrichment

NVD

Vulners

Node

weintek cmt-fhd_firmwareRange<20210212

AND

weintek cmt-fhdMatch-

Node

weintek cmt-hdm_firmwareRange<20210206

AND

weintek cmt-hdmMatch-

Node

weintek cmt3071_firmwareRange<20210220

AND

weintek cmt3071Match-

Node

weintek cmt3072_firmwareRange<20210220

AND

weintek cmt3072Match-

Node

weintek cmt3090_firmwareRange<20210220

AND

weintek cmt3090Match-

Node

weintek cmt3103_firmwareRange<20210220

AND

weintek cmt3103Match-

Node

weintek cmt3151_firmwareRange<20210220

AND

weintek cmt3151Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "cMT-FHD",
    "vendor": "Weintek",
    "versions": [
      {
        "lessThanOrEqual": "20210210 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "cMT-HDM",
    "vendor": "Weintek",
    "versions": [
      {
        "lessThanOrEqual": "20210204 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "cMT3071",
    "vendor": "Weintek",
    "versions": [
      {
        "lessThanOrEqual": "20210218",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "cMT3072",
    "vendor": "Weintek",
    "versions": [
      {
        "lessThanOrEqual": "20210218",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "cMT3103",
    "vendor": "Weintek",
    "versions": [
      {
        "lessThanOrEqual": "20210218",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "cMT3090",
    "vendor": "Weintek",
    "versions": [
      {
        "lessThanOrEqual": "20210218",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "cMT3151",
    "vendor": "Weintek",
    "versions": [
      {
        "lessThanOrEqual": "20210218",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-285-12
dl	www.dl.weintek.com/public/Document/TEC/TEC23005E_cMT_Web_Security_Update.pdf

21 Nov 2024 08:24Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

EPSS0.0008

SSVC