CVE-2023-38584: In Weintek's cMT3000 HMI Web CGI device, the cgi-bin command_wb.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack…

PriorityP264critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

1.05%

60.0th percentile

In Weintek's cMT3000 HMI Web CGI device, the cgi-bin command_wb.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
weintek	cmt-fhd	<= 20210210	—
weintek	cmt-fhd_firmware	< 20210212	20210212
weintek	cmt-hdm	<= 20210204	—
weintek	cmt-hdm_firmware	< 20210206	20210206
weintek	cmt3071	<= 20210218	—
weintek	cmt3071_firmware	< 20210220	20210220
weintek	cmt3072	<= 20210218	—
weintek	cmt3072_firmware	< 20210220	20210220
weintek	cmt3090	<= 20210218	—
weintek	cmt3090_firmware	< 20210220	20210220
weintek	cmt3103	<= 20210218	—
weintek	cmt3103_firmware	< 20210220	20210220
weintek	cmt3151	<= 20210218	—
weintek	cmt3151_firmware	< 20210220	20210220

Detection & IOCsextracted from sources · hover to see the quote

path/cgi-bin/command_wb.cgi↗

→Monitor for unauthenticated HTTP requests targeting /cgi-bin/command_wb.cgi on Weintek cMT3000 HMI devices, which may indicate exploitation of the stack-based buffer overflow to bypass login authentication. ↗
→Monitor for unauthenticated HTTP requests targeting /cgi-bin/codesys.cgi on Weintek cMT3000 HMI devices, which may indicate exploitation of a related stack-based buffer overflow (CVE-2023-43492). ↗
→The vulnerability is exploitable remotely with no authentication and low attack complexity (CVSS 9.8); prioritize detection of any external network access to these CGI endpoints. ↗

·No known public exploitation specifically targeting these vulnerabilities has been reported at time of advisory publication. ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.