CVE:CVE-2021-27446
CNNVD:CNNVD-202103-1300
Rusavtomatika Weintek EasyWeb cMT是俄罗斯Rusavtomatika公司的一个应用平台。用于配置人机界面的参数。
Rusavtomatika Weintek EasyWeb cMT 存在代码注入漏洞，该漏洞允许未经身份验证的远程攻击者执行具有root特权的命令操作系统。
solution:Upgrade weintek cmt-svr-100_firmware to a higher version than 20210305,and avoid the version (,20210305); Upgrade weintek cmt-svr-102_firmware to a higher version than 20210305,and avoid the version (,20210305); Upgrade weintek cmt-svr-200_firmware to a higher version than 20210305,and avoid the version (,20210305); Upgrade weintek cmt-svr-202_firmware to a higher version than 20210305,and avoid the version (,20210305); Upgrade weintek cmt-g01_firmware to a higher version than 20210209,and avoid the version (,20210209); Upgrade weintek cmt-g02_firmware to a higher version than 20210209,and avoid the version (,20210209); Upgrade weintek cmt-g03_firmware to a higher version than 20210222,and avoid the version (,20210222); Upgrade weintek cmt-g04_firmware to a higher version than 20210222,and avoid the version (,20210222); Upgrade weintek cmt3071_firmware to a higher version than 20210218,and avoid the version (,20210218); Upgrade weintek cmt3072_firmware to a higher version than 20210218,and avoid the version (,20210218); Upgrade weintek cmt3090_firmware to a higher version than 20210218,and avoid the version (,20210218); Upgrade weintek cmt3103_firmware to a higher version than 20210218,and avoid the version (,20210218); Upgrade weintek cmt3151_firmware to a higher version than 20210218,and avoid the version (,20210218); Upgrade weintek cmt-hdm_firmware to a higher version than 20210204,and avoid the version (,20210204); Upgrade weintek cmt-fhd_firmware to a higher version than 20210208,and avoid the version (,20210208); Upgrade weintek cmt-ctrl01_firmware to a higher version than 20210302,and avoid the version (,20210302)