title: Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow
description:
In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.
problem types: CWE-121 Stack-based Buffer Overflow
affected:
{
defaultStatus: unaffected
product: cMT-FHD
vendor: Weintek
versions:
lessThanOrEqual: 20210210 , status: affected, version: 0, versionType: custom
}
{
defaultStatus: unaffected
product: cMT-HDM
vendor: Weintek
versions:
lessThanOrEqual: 20210204 , status: affected, version: 0, versionType: custom
}
{
defaultStatus: unaffected
product: cMT3071
vendor: Weintek
versions:
lessThanOrEqual: 20210218, status: affected, version: 0, versionType: custom
}
{
defaultStatus: unaffected
product: cMT3072
vendor: Weintek
versions:
lessThanOrEqual: 20210218, status: affected, version: 0, versionType: custom
}
{
defaultStatus: unaffected
product: cMT3103
vendor: Weintek
versions:
lessThanOrEqual: 20210218, status: affected, version: 0, versionType: custom
}
{
defaultStatus: unaffected
product: cMT3090
vendor: Weintek
versions:
lessThanOrEqual: 20210218, status: affected, version: 0, versionType: custom
}
{
defaultStatus: unaffected
product: cMT3151
vendor: Weintek
versions:
lessThanOrEqual: 20210218, status: affected, version: 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions:
Weintek recommends users follow their  Upgrade Instructions https://dl.weintek.com/public/Document/UM0/UM018010E_cMT_Series_OS_Update_Instructions_eng.pdf  to update the following products to the latest versions:
*  cMT-FHD: OS version 20210211
*  cMT-HDM: OS version 20210205
*  cMT3071: OS version 20210219
*  cMT3072: OS version 20210219
*  cMT3103: OS version 20210219
*  cMT3090: OS version 20210219
*  cMT3151: OS version 20210219
For additional information, refer to  Weintek's security bulletin https://dl.weintek.com/public/Document/TEC/TEC23005E_cMT_Web_Security_Update.pdf .