CVE Feed

    Dashboard / CVE / CVE-2023-43492

    CVE-2023-43492

    In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.

    Published:Oct 19, 2023
    Last Modified:Jan 16, 2025
    EPS:Oct 19, 2023
    EPSS Score:0.0008
    CVSS Score:9.8

    Affected Products

    Vendor
    Weintek
    Product
    Cmt-fhd
    Vendor
    Weintek
    Product
    Cmt-fhd Firmware
    Vendor
    Weintek
    Product
    Cmt-hdm
    Vendor
    Weintek
    Product
    Cmt-hdm Firmware
    Vendor
    Weintek
    Product
    Cmt3071
    Vendor
    Weintek
    Product
    Cmt3071 Firmware
    Vendor
    Weintek
    Product
    Cmt3072
    Vendor
    Weintek
    Product
    Cmt3072 Firmware
    Vendor
    Weintek
    Product
    Cmt3090
    Vendor
    Weintek
    Product
    Cmt3090 Firmware
    Vendor
    Weintek
    Product
    Cmt3103
    Vendor
    Weintek
    Product
    Cmt3103 Firmware
    Vendor
    Weintek
    Product
    Cmt3151
    Vendor
    Weintek
    Product
    Cmt3151 Firmware

    Exploits

    https://dl.weintek.com/public/Document/TEC/TEC23005E_cMT_Web_Security_Update.pdfhttps://dl.weintek.com/public/Document/TEC/TEC23005E_cMT_Web_Security_Update.pdf

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High