Lucene search
HistoryOct 19, 2023 - 8:15 p.m.
CVE-2023-43492
weintek
cmt3000
buffer overflow
authentication bypass
cgi
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
EPSS
0.001
Percentile
40.7%
In Weintek’s cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.
Affected configurations
Node
weintekcmt-fhdMatch-
weintekcmt-fhd_firmwareRange<20210212
Node
weintekcmt-hdmMatch-
weintekcmt-hdm_firmwareRange<20210206
Node
weintekcmt3071Match-
weintekcmt3071_firmwareRange<20210220
Node
weintekcmt3072Match-
weintekcmt3072_firmwareRange<20210220
Node
weintekcmt3090Match-
weintekcmt3090_firmwareRange<20210220
Node
weintekcmt3103Match-
weintekcmt3103_firmwareRange<20210220
Node
weintekcmt3151Match-
weintekcmt3151_firmwareRange<20210220
| Vendor | Product | Version | CPE |
|---|---|---|---|
| weintek | cmt-fhd | - | cpe:2.3:h:weintek:cmt-fhd:-:*:*:*:*:*:*:* |
| weintek | cmt-fhd_firmware | * | cpe:2.3:o:weintek:cmt-fhd_firmware:*:*:*:*:*:*:*:* |
| weintek | cmt-hdm | - | cpe:2.3:h:weintek:cmt-hdm:-:*:*:*:*:*:*:* |
| weintek | cmt-hdm_firmware | * | cpe:2.3:o:weintek:cmt-hdm_firmware:*:*:*:*:*:*:*:* |
| weintek | cmt3071 | - | cpe:2.3:h:weintek:cmt3071:-:*:*:*:*:*:*:* |
| weintek | cmt3071_firmware | * | cpe:2.3:o:weintek:cmt3071_firmware:*:*:*:*:*:*:*:* |
| weintek | cmt3072 | - | cpe:2.3:h:weintek:cmt3072:-:*:*:*:*:*:*:* |
| weintek | cmt3072_firmware | * | cpe:2.3:o:weintek:cmt3072_firmware:*:*:*:*:*:*:*:* |
| weintek | cmt3090 | - | cpe:2.3:h:weintek:cmt3090:-:*:*:*:*:*:*:* |
| weintek | cmt3090_firmware | * | cpe:2.3:o:weintek:cmt3090_firmware:*:*:*:*:*:*:*:* |
Related
prion
prion
Stack overflow
2023-10-19 20:15:00
cve
cve
CVE-2023-43492
2023-10-19 20:15:09
cvelist
cvelist
CVE-2023-43492 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow
2023-10-19 19:28:59
ics
ics
Weintek cMT3000 HMI Web CGI
2023-10-12 12:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
EPSS
0.001
Percentile
40.7%
Related for NVD:CVE-2023-43492