{"document":{"acknowledgments":[{"names":["Vincenzo Giuseppe Colacino"],"organization":"Secoore","summary":"reported these vulnerabilities to CISA"}],"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"text":"Disclosure is not limited","tlp":{"label":"WHITE","url":"https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage"}},"lang":"en-US","notes":[{"category":"legal_disclaimer","text":"This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).","title":"Legal Notice and Terms of Use"},{"category":"summary","text":"Successful exploitation of these vulnerabilities could allow a non-privileged user to escalate privileges or view the credentials of other users.","title":"Advisory Summary"},{"category":"other","text":"Critical Manufacturing","title":"Critical infrastructure sectors"},{"category":"other","text":"Worldwide","title":"Countries/areas deployed"},{"category":"other","text":"Taiwan","title":"Company headquarters location"},{"category":"general","text":"CISA recommends users take the following measures to protect themselves from social engineering attacks:","title":"Recommended Practices"},{"category":"general","text":"Practice principles of least privilege.","title":"Recommended Practices"},{"category":"general","text":"Do not click web links or open attachments in unsolicited email messages.","title":"Recommended Practices"},{"category":"general","text":"Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.","title":"Recommended Practices"},{"category":"general","text":"Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.","title":"Recommended Practices"},{"category":"general","text":"CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.","title":"Recommended Practices"},{"category":"general","text":"CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.","title":"Recommended Practices"},{"category":"general","text":"CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.","title":"Recommended Practices"},{"category":"general","text":"Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.","title":"Recommended Practices"},{"category":"general","text":"Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.","title":"Recommended Practices"},{"category":"general","text":"No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.","title":"Recommended Practices"}],"publisher":{"category":"coordinator","contact_details":"central@cisa.dhs.gov","name":"CISA","namespace":"https://www.cisa.gov/"},"references":[{"category":"self","summary":"ICS Advisory ICSA-26-204-03 JSON","url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-204-03.json"},{"category":"self","summary":"ICSA Advisory ICSA-26-204-03 - Web Version","url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-03"},{"category":"external","summary":"Recommended Practices","url":"https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf"},{"category":"external","summary":"Recommended Practices","url":"https://www.cisa.gov/uscert/ncas/tips/ST04-014"},{"category":"external","summary":"Recommended Practices","url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"},{"category":"external","summary":"Recommended Practices","url":"https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"},{"category":"external","summary":"Recommended Practices","url":"https://www.cisa.gov/topics/industrial-control-systems"},{"category":"external","summary":"Recommended Practices","url":"https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01"},{"category":"external","summary":"Recommended Practices","url":"https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"},{"category":"external","summary":"Recommended Practices","url":"https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b"},{"category":"external","summary":"Recommended Practices","url":"https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing"},{"category":"external","summary":"Recommended Practices","url":"https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks"}],"title":"Weintek cMT3092X","tracking":{"current_release_date":"2026-07-23T06:00:00.000000Z","generator":{"date":"2026-07-22T17:12:41.646110Z","engine":{"name":"CISA CSAF Generator","version":"1.0.0"}},"id":"ICSA-26-204-03","initial_release_date":"2026-07-23T06:00:00.000000Z","revision_history":[{"date":"2026-07-23T06:00:00.000000Z","legacy_version":"Initial","number":"1","summary":"Initial Publication"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version_range","name":"<20210218","product":{"name":"Weintek cMT3092X firmware: <20210218","product_id":"CSAFPID-0001"}}],"category":"product_name","name":"cMT3092X firmware"},{"branches":[{"category":"product_version_range","name":"