CVE-2023-40145

Summary

In Weintek's cMT3000 HMI Web CGI device, an anonymous attacker can execute arbitrary commands after login to the device.

Affected Software

VendorProductVersion RangeStatus
WeintekcMT-FHD0 <= 20210210affected
WeintekcMT-HDM0 <= 20210204affected
WeintekcMT30710 <= 20210218affected
WeintekcMT30720 <= 20210218affected
WeintekcMT31030 <= 20210218affected
WeintekcMT30900 <= 20210218affected
WeintekcMT31510 <= 20210218affected

Weaknesses

  • CWE-78: CWE-78 OS Command Injection

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References