cve/2023/CVE-2023-43492.md

### [CVE-2023-43492](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43492)
![](https://img.shields.io/static/v1?label=Product&message=cMT-FHD&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=cMT-HDM&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=cMT3071&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=cMT3072&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=cMT3090&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=cMT3103&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=cMT3151&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%3D%2020210204%20%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%3D%2020210210%20%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%3D%2020210218%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-121%20Stack-based%20Buffer%20Overflow&color=brighgreen)

### Description

In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds