Login Request a demo
CF
Product
Cmt-3072xh2 Firmware
by Weintek · last CVE Mar 3, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 4Medium 2Low 0
Severity
All severities9Critical3High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cmt-3072xh2 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-55026
9.8
0%
Mar 3
An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET…
Affected: 20231011
CVE-2024-55024
9.8
0%
Mar 3
An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative…
Affected: 20231011
CVE-2024-55020
9.8
2%
Mar 3
A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary commands…
Affected: 20231011
CVE-2024-55022
8.8
1%
Mar 3
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter
Affected: 20231011
CVE-2024-55019
7.5
0%
Mar 3
Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary…
Affected: 20231011
CVE-2024-55021
7.5
0%
Mar 3
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol
Affected: 20231011
CVE-2024-55027
7.5
0%
Mar 3
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db
Affected: 20231011
CVE-2024-55025
6.5
0%
Mar 3
Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access the HMI system
Affected: 20231011
CVE-2024-55023
5.3
0%
Mar 3
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information
Affected: 20231011
Showing 9