cMT-CTRL01 vulnerabilities

2 known vulnerabilities in cMT-CTRL01 from Weintek. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  cMT3072XH: Unverified Password Change

  CVE-2025-14751Jan 22, 2026Weintek

  A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege escalation.

• 8.7 High severity

  cMT3072XH: External Control of Assumed-Immutable Web Parameter

  CVE-2025-14750Jan 22, 2026Weintek

  The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. A low-privileged user can modify the parameters and potentially manipulate account-level privileges.