CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2021-27442
Medium (6.1) in weintek. EPSS 0.9% chance of exploitation in the next 30 days.
The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- weintek:cmt-ctrl01_firmware
- weintek:cmt-fhd_firmware
- weintek:cmt-g01_firmware
- weintek:cmt-g02_firmware
- weintek:cmt-g03_firmware
- weintek:cmt-g04_firmware
- weintek:cmt-hdm_firmware
- weintek:cmt-svr-100_firmware
- weintek:cmt-svr-102_firmware
- weintek:cmt-svr-200_firmware
- weintek:cmt-svr-202_firmware
- weintek:cmt3071_firmware
- weintek:cmt3072_firmware
- weintek:cmt3090_firmware
- weintek:cmt3103_firmware
- weintek:cmt3151_firmware