Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2025-14750

External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service

The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. A low-privileged user can modify the parameters and potentially manipulate account-level privileges.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Weintek
Products
Cmt-ctrl01 Cmt-svrx-820 Cmt3072xh
CVE-2025-14751

Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service

A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege escalation.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Weintek
Products
Cmt-ctrl01 Cmt-svrx-820 Cmt3072xh