CVE-2021-27444

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: May 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-274457.8Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device.CVE-2021-274469.8The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with ro CVE-2021-274479.8Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code.CVE-2021-274487.8A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E (all firmware versio CVE-2021-274498.8Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server CVE-2021-274507.8SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which cou CVE-2021-274519.8Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain ac CVE-2021-274527.8The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credenti CVE-2021-274539.8Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an CVE-2021-274547.8The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies th CVE-2021-274555.5Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read while processing project files, which may all CVE-2021-274562.4Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.