CVE-2023-43492
Assigner: icscert
Published: 2023-10-19T19:28:59.236Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: cMT-FHD
vendor: Weintek
versions: lessThanOrEqual: 20210210 
status: affected
version: 0
versionType: custom
defaultStatus: unaffected
product: cMT-HDM
vendor: Weintek
versions: lessThanOrEqual: 20210204 
status: affected
version: 0
versionType: custom
defaultStatus: unaffected
product: cMT3071
vendor: Weintek
versions: lessThanOrEqual: 20210218
status: affected
version: 0
versionType: custom
defaultStatus: unaffected
product: cMT3072
vendor: Weintek
versions: lessThanOrEqual: 20210218
status: affected
version: 0
versionType: custom
defaultStatus: unaffected
product: cMT3103
vendor: Weintek
versions: lessThanOrEqual: 20210218
status: affected
version: 0
versionType: custom
defaultStatus: unaffected
product: cMT3090
vendor: Weintek
versions: lessThanOrEqual: 20210218
status: affected
version: 0
versionType: custom
defaultStatus: unaffected
product: cMT3151
vendor: Weintek
versions: lessThanOrEqual: 20210218
status: affected
version: 0
versionType: custom
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Hank Chen (PSIRT and Threat Research of TXOne Networks) reported these vulnerabilities to CISA.
datePublic: 2023-10-12T17:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">

<span style="background-color: rgb(255, 255, 255);">

<span style="background-color: rgb(255, 255, 255);">

<span style="background-color: rgb(255, 255, 255);">

<span style="background-color: rgb(255, 255, 255);">In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.</span>

</span>

</span></span></span>
value: 








In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.




metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-121
description: CWE-121 Stack-based Buffer Overflow
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: 





<p>Weintek recommends users follow their <a target="_blank" rel="nofollow" href="https://dl.weintek.com/public/Document/UM0/UM018010E_cMT_Series_OS_Update_Instructions_eng.pdf">Upgrade Instructions</a>&nbsp;to update the following products to the latest versions:</p><ul><li>cMT-FHD: OS version 20210211</li><li>cMT-HDM: OS version 20210205</li><li>cMT3071: OS version 20210219</li><li>cMT3072: OS version 20210219</li><li>cMT3103: OS version 20210219</li><li>cMT3090: OS version 20210219</li><li>cMT3151: OS version 20210219</li></ul><p>For additional information, refer to <a target="_blank" rel="nofollow" href="https://dl.weintek.com/public/Document/TEC/TEC23005E_cMT_Web_Security_Update.pdf">Weintek's security bulletin</a>.</p>





<br>
value: 




Weintek recommends users follow their  Upgrade Instructions https://dl.weintek.com/public/Document/UM0/UM018010E_cMT_Series_OS_Update_Instructions_eng.pdf  to update the following products to the latest versions:

  *  cMT-FHD: OS version 20210211
  *  cMT-HDM: OS version 20210205
  *  cMT3071: OS version 20210219
  *  cMT3072: OS version 20210219
  *  cMT3103: OS version 20210219
  *  cMT3090: OS version 20210219
  *  cMT3151: OS version 20210219


For additional information, refer to  Weintek's security bulletin https://dl.weintek.com/public/Document/TEC/TEC23005E_cMT_Web_Security_Update.pdf .









source: advisory: ICSMA-23-285-12
discovery: EXTERNAL
title: Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow
x_generator: engine: Vulnogram 0.1.0-dev