CVE-2023-43492

In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:weintek:cmt-fhd_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:weintek:cmt-fhd:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:weintek:cmt-hdm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:weintek:cmt-hdm:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:weintek:cmt3071_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:weintek:cmt3071:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:weintek:cmt3072_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:weintek:cmt3072:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:weintek:cmt3090_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:weintek:cmt3090:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:weintek:cmt3103_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:weintek:cmt3103:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:weintek:cmt3151_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:weintek:cmt3151:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:24

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-19 20:15

Updated : 2024-11-21 08:24


NVD link : CVE-2023-43492

Mitre link : CVE-2023-43492

CVE.ORG link : CVE-2023-43492


JSON object : View

Products Affected

weintek

  • cmt-fhd
  • cmt-hdm
  • cmt3072_firmware
  • cmt3151
  • cmt3090_firmware
  • cmt3103
  • cmt3072
  • cmt3090
  • cmt-hdm_firmware
  • cmt-fhd_firmware
  • cmt3071
  • cmt3071_firmware
  • cmt3103_firmware
  • cmt3151_firmware
CWE
CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write