CVE-2023-50466

An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows attackers to execute arbitrary code or…

published December 19, 2023

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows attackers to execute arbitrary code or access sensitive information via injecting a crafted payload into the HMI Name parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01904 · 79.6th percentile
Published
2023-12-19T00:00Z
EPSS history
Timeline
  • 19 DEC 00:00Z
    An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows attackers to execute arbitrary code or…
    cvelistv5