Weintek
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| cMT-HDM | 6 | – | Oct 19, 2023 |
| cMT-FHD | 6 | – | Oct 19, 2023 |
| cMT-CTRL01 | 5 | – | Jan 22, 2026 |
| Weincloud | 4 | – | Jul 19, 2023 |
| cMT3092X firmware | 4 | – | Jul 24, 2026 |
| EasyWeb | 4 | – | Jul 24, 2026 |
| cMT-SVR-1xx/2xx | 3 | – | May 16, 2022 |
| cMT3071 | 3 | – | Oct 19, 2023 |
| cMT3071/cMT3072/cMT3090/cMT3103/cMT3151 | 3 | – | May 16, 2022 |
| cMT3072 | 3 | – | Oct 19, 2023 |
| cMT3090 | 3 | – | Oct 19, 2023 |
| cMT-G01/G02 | 3 | – | May 16, 2022 |
| cMT3103 | 3 | – | Oct 19, 2023 |
| cMT3151 | 3 | – | Oct 19, 2023 |
| cMT-G03/G04 | 3 | – | May 16, 2022 |
| cMT3072XH | 2 | – | Jan 22, 2026 |
| cMT3072XH(T) | 2 | – | Jan 22, 2026 |
| cMT-SVRX-820 | 2 | – | Jan 22, 2026 |
| EasyBuilder Pro | 1 | – | Nov 6, 2023 |
| EasyBuilder Pro cMT | 1 | – | Feb 22, 2023 |
Exploited and recent CVEs
- CVE-2026-60134 Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision 0.6%
- CVE-2026-60134 Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision 0.6%
- CVE-2026-61892 Weintek cMT3092X Incorrect Permission Assignment for Critical Resource 0.5%
- CVE-2026-61892 Weintek cMT3092X Incorrect Permission Assignment for Critical Resource 0.5%
- CVE-2026-61886 Weintek cMT3092X Plaintext Storage of a Password 0.4%
- CVE-2026-61886 Weintek cMT3092X Plaintext Storage of a Password 0.4%
- CVE-2026-60135 Weintek cMT3092X Incorrect User Management 0.4%
- CVE-2026-60135 Weintek cMT3092X Incorrect User Management 0.4%
- CVE-2025-14751 Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service 0.4%
- CVE-2025-14751 Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service 0.4%
- CVE-2025-14751 Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service 0.4%
- CVE-2025-14751 Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service 0.4%
- CVE-2025-14750 External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service 0.3%
- CVE-2025-14750 External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service 0.3%
- CVE-2025-14750 External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service 0.3%
- CVE-2025-14750 External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service 0.3%
- CVE-2023-5777 Weintek EasyBuilder Pro Use of Hard-coded Credentials 0.7%
- CVE-2023-43492 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow 1.1%
- CVE-2023-43492 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow 1.1%
- CVE-2023-43492 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow 1.1%
- CVE-2023-43492 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow 1.1%
- CVE-2023-43492 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow 1.1%
- CVE-2023-43492 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow 1.1%
- CVE-2023-43492 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow 1.1%
- CVE-2023-40145 Weintek cMT3000 HMI Web CGI OS Command Injection 1.5%
- CVE-2023-40145 Weintek cMT3000 HMI Web CGI OS Command Injection 1.5%
- CVE-2023-40145 Weintek cMT3000 HMI Web CGI OS Command Injection 1.5%
- CVE-2023-40145 Weintek cMT3000 HMI Web CGI OS Command Injection 1.5%
- CVE-2023-40145 Weintek cMT3000 HMI Web CGI OS Command Injection 1.5%
- CVE-2023-40145 Weintek cMT3000 HMI Web CGI OS Command Injection 1.5%