Weintek Update
2570Warning Date
Severity Level
Warning Number
Target Sector
25 March, 2021
● Critical
2021-2670
Water and Utilities - Commerce and Investment
Description:
Weintek has released a security update to address several vulnerabilities in the following product:
- cMT
- cMT-SVR-1xx/2xx, versions prior to 20210305
- cMT-G01/G02, versions prior to 20210209
- cMT-G03/G04, versions prior to 20210222
- cMT3071/cMT3072/cMT3090/cMT3103/cMT3151, versions prior to 20210218
- cMT-HDM, versions prior to 20210204
- cMT-FHD, versions prior to 20210208
- cMT-CTRL01, versions prior to 20210302
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Execute arbitrary code -remotely
- Unauthorized disclosure of information
- Escalate privileges to root on an affected device
Best practice and Recommendations:
The CERT team encourages users to review Weintek security advisory and apply the necessary updates: