EA
Product
EasyWeb
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 4Low 0
Watch
Add EasyWeb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-60134 | 8.8 | Jul 24 | Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision Affected: before v2.1.20 |
| CVE-2026-61892 | 8.8 | Jul 24 | Weintek cMT3092X Incorrect Permission Assignment for Critical Resource Affected: before v2.1.20 |
| CVE-2024-55022 | 8.8 | Mar 3 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter Affected: 2.1.53 |
| CVE-2024-55019 | 7.5 | Mar 3 | Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary… Affected: 2.1.53 |
| CVE-2024-55021 | 7.5 | Mar 3 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol Affected: 2.1.53 |
| CVE-2024-55027 | 7.5 | Mar 3 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db Affected: 2.1.53 |
Showing 6
