Input Validation Flaw in Web Application Affects Vendor Software
CVE-2025-14750

8.7HIGH

Key Information:

Vendor

Weintek

Status
Cmt3072xh
Cmt3072xh(t)
Cmt-svrx-820
Cmt-ctrl01
Vendor
CVE Published:
22 January 2026

What is CVE-2025-14750?

A vulnerability exists in a web application where the system fails to properly validate inputs expected to be immutable. This flaw allows low-privileged users to manipulate parameters that can potentially lead to unauthorized changes in account-level privileges, posing a serious risk to data integrity and user security.

Affected Version(s)

cMT-CTRL01 20230308 < 20250827

cMT-SVRX-820 20220413 < 20240919

cMT3072XH 20200630 < 20241112

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-0...
government-resource

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Joel Aviad Ossi of WebSec B.V reported these vulnerabilities to CISA.
.