EA
Product
EasyWeb
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 4Low 0
Watch
Add EasyWeb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-55026 | 9.8 | Mar 3 | An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET… Affected: 2.1.53 |
| CVE-2024-55020 | 9.8 | Mar 3 | A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary commands… Affected: 2.1.53 |
| CVE-2024-55024 | 9.8 | Mar 3 | An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative… Affected: 2.1.53 |
| CVE-2026-60134 | 8.8 | Jul 24 | Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision Affected: before v2.1.20 |
| CVE-2026-61892 | 8.8 | Jul 24 | Weintek cMT3092X Incorrect Permission Assignment for Critical Resource Affected: before v2.1.20 |
| CVE-2024-55022 | 8.8 | Mar 3 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter Affected: 2.1.53 |
| CVE-2024-55019 | 7.5 | Mar 3 | Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary… Affected: 2.1.53 |
| CVE-2024-55021 | 7.5 | Mar 3 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol Affected: 2.1.53 |
| CVE-2024-55027 | 7.5 | Mar 3 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db Affected: 2.1.53 |
| CVE-2026-61886 | 6.5 | Jul 24 | Weintek cMT3092X Plaintext Storage of a Password Affected: before v2.1.20 |
| CVE-2026-60135 | 6.5 | Jul 24 | Weintek cMT3092X Incorrect User Management Affected: before v2.1.20 |
| CVE-2024-55025 | 6.5 | Mar 3 | Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access the HMI system Affected: 2.1.53 |
| CVE-2024-55023 | 5.3 | Mar 3 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information Affected: 2.1.53 |
Showing 13