Approved changes feed: RSS · Atom

cpe:2.3:o:weintek:cmt-3072xh2_firmware:20231011:*:*:*:*:*:*:*

part: o version: 20231011 update: *

VendorWeintek (b4691633-4eb4-52d5-bc64-ee82eca3c353)
ProductCmt 3072Xh2 Firmware (391cb790-9214-5af4-9ca6-17c08e883b15)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-55027 vulnerable 2026-06-08 06:54:16.905807 Details available
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.
Published: 2026-03-03T00:00:00.000Z
Updated: 2026-03-04T14:42:03.757Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55026 vulnerable 2026-06-08 06:54:16.905229 Details available
An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET request.
Published: 2026-03-03T00:00:00.000Z
Updated: 2026-03-04T14:47:02.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55025 vulnerable 2026-06-08 06:54:16.904644 Details available
Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access the HMI system.
Published: 2026-03-03T00:00:00.000Z
Updated: 2026-03-03T19:15:17.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55024 vulnerable 2026-06-08 06:54:16.904262 Details available
An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative actions using service accounts.
Published: 2026-03-03T00:00:00.000Z
Updated: 2026-03-03T19:55:39.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55023 vulnerable 2026-06-08 06:54:16.903779 Details available
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information.
Published: 2026-03-03T00:00:00.000Z
Updated: 2026-03-03T19:56:36.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55022 vulnerable 2026-06-08 06:54:16.903219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55021 vulnerable 2026-06-08 06:54:16.902696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55020 vulnerable 2026-06-08 06:54:16.902029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55019 vulnerable 2026-06-08 06:54:16.900924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.