8.7
CVE-2025-14751
- EPSS 0.36%
- Veröffentlicht 22.01.2026 21:42:50
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service
A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege escalation.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerWeintek
≫
Produkt
cMT3072XH
Default Statusunaffected
Version
20200630
Version <
20241112
Status
affected
HerstellerWeintek
≫
Produkt
cMT3072XH(T)
Default Statusunaffected
Version
20200630
Version <
20241112
Status
affected
HerstellerWeintek
≫
Produkt
cMT-SVRX-820
Default Statusunaffected
Version
20220413
Version <
20240919
Status
affected
HerstellerWeintek
≫
Produkt
cMT-CTRL01
Default Statusunaffected
Version
20230308
Version <
20250827
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.36% | 0.273 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| ics-cert@hq.dhs.gov | 8.7 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
CWE-620 Unverified Password Change
When setting a new password for a user, the product does not require knowledge of the original password, or using another form of authentication.
https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-05