WE
Vendor
Weintek
131
CVEs
0
On KEV
0
New 30D
Products
EA9.8
EasyWeb
Weintek
13 CVEs0 on KEV0 new
CF9.8
Cmt-3072xh2 Firmware
Weintek
9 CVEs0 on KEV0 new
CF9.8
Cmt-fhd Firmware
Weintek
6 CVEs0 on KEV0 new
CF9.8
Cmt-hdm Firmware
Weintek
6 CVEs0 on KEV0 new
CF9.8
Cmt3071 Firmware
Weintek
6 CVEs0 on KEV0 new
CF9.8
Cmt3072 Firmware
Weintek
6 CVEs0 on KEV0 new
CF9.8
Cmt3090 Firmware
Weintek
6 CVEs0 on KEV0 new
CF9.8
Cmt3103 Firmware
Weintek
6 CVEs0 on KEV0 new
CF9.8
Cmt3151 Firmware
Weintek
6 CVEs0 on KEV0 new
CF8.8
cMT3092X firmware
Weintek
4 CVEs0 on KEV0 new
WE8.8
Weincloud
Weintek
4 CVEs0 on KEV0 new
CF9.8
Cmt-ctrl01 Firmware
Weintek
3 CVEs0 on KEV0 new
CM9.8
cMT-FHD
Weintek
3 CVEs0 on KEV0 new
CF9.8
Cmt-g01 Firmware
Weintek
3 CVEs0 on KEV0 new
CF9.8
Cmt-g02 Firmware
Weintek
3 CVEs0 on KEV0 new
CF9.8
Cmt-g03 Firmware
Weintek
3 CVEs0 on KEV0 new
CF9.8
Cmt-g04 Firmware
Weintek
3 CVEs0 on KEV0 new
CM9.8
cMT-HDM
Weintek
3 CVEs0 on KEV0 new
CF9.8
Cmt-svr-100 Firmware
Weintek
3 CVEs0 on KEV0 new
CF9.8
Cmt-svr-102 Firmware
Weintek
3 CVEs0 on KEV0 new
CF9.8
Cmt-svr-200 Firmware
Weintek
3 CVEs0 on KEV0 new
CF9.8
Cmt-svr-202 Firmware
Weintek
3 CVEs0 on KEV0 new
CM9.8
cMT3071
Weintek
3 CVEs0 on KEV0 new
CM9.8
cMT3072
Weintek
3 CVEs0 on KEV0 new
CM9.8
cMT3090
Weintek
3 CVEs0 on KEV0 new
CM9.8
cMT3103
Weintek
3 CVEs0 on KEV0 new
CM9.8
cMT3151
Weintek
3 CVEs0 on KEV0 new
CM8.7
cMT-CTRL01
Weintek
2 CVEs0 on KEV0 new
CM8.7
cMT-SVRX-820
Weintek
2 CVEs0 on KEV0 new
CM8.7
cMT3072XH
Weintek
2 CVEs0 on KEV0 new
CM8.7
cMT3072XH(T)
Weintek
2 CVEs0 on KEV0 new
EP9.8
EasyBuilder Pro
Weintek
2 CVEs0 on KEV0 new
CF8.8
Cmt2078x Firmware
Weintek
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-60134 | CF cMT3092X firmware Weintek | 8.8 | Jul 24 | Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision |
| CVE-2026-61892 | EA EasyWeb Weintek | 8.8 | Jul 24 | Weintek cMT3092X Incorrect Permission Assignment for Critical Resource |
| CVE-2026-61886 | EA EasyWeb Weintek | 6.5 | Jul 24 | Weintek cMT3092X Plaintext Storage of a Password |
| CVE-2026-60135 | EA EasyWeb Weintek | 6.5 | Jul 24 | Weintek cMT3092X Incorrect User Management |
| CVE-2024-55024 | EA Easyweb Weintek | 9.8 | Mar 3 | An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative… |
| CVE-2024-55023 | EA Easyweb Weintek | 5.3 | Mar 3 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information |
| CVE-2024-55022 | CF Cmt-3072xh2 Firmware Weintek | 8.8 | Mar 3 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter |
| CVE-2024-55021 | CF Cmt-3072xh2 Firmware Weintek | 7.5 | Mar 3 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol |
| CVE-2024-55019 | CF Cmt-3072xh2 Firmware Weintek | 7.5 | Mar 3 | Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary… |
| CVE-2024-55020 | EA Easyweb Weintek | 9.8 | Mar 3 | A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary commands… |
| CVE-2024-55027 | CF Cmt-3072xh2 Firmware Weintek | 7.5 | Mar 3 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db |
| CVE-2024-55026 | CF Cmt-3072xh2 Firmware Weintek | 9.8 | Mar 3 | An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET… |
| CVE-2024-55025 | CF Cmt-3072xh2 Firmware Weintek | 6.5 | Mar 3 | Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access the HMI system |
| CVE-2025-14751 | CM cMT-SVRX-820 Weintek | 8.7 | Jan 22 | Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service |
| CVE-2025-14750 | CM cMT3072XH(T) Weintek | 8.7 | Jan 22 | External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service |
| CVE-2023-50466 | CF Cmt2078x Firmware Weintek | 8.8 | Dec 19 | An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows attackers to execute arbitrary code or access sensitive… |
| CVE-2023-5777 | EP EasyBuilder Pro Weintek | 9.8 | Nov 6 | Weintek EasyBuilder Pro Use of Hard-coded Credentials |
| CVE-2023-43492 | CM cMT-FHD Weintek | 9.8 | Oct 19 | Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow |
| CVE-2023-40145 | CM cMT3151 Weintek | 8.8 | Oct 19 | Weintek cMT3000 HMI Web CGI OS Command Injection |
| CVE-2023-38584 | CM cMT-HDM Weintek | 9.8 | Oct 19 | Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow |
| CVE-2023-37362 | WE Weincloud Weintek | 8.8 | Jul 19 | Weintek Weincloud Improper Authentication |
| CVE-2023-32657 | WE Weincloud Weintek | 7.5 | Jul 19 | Weintek Weincloud Improper Restriction of Excessive Authentication Attempts |
| CVE-2023-34429 | WE Weincloud Weintek | 7.5 | Jul 19 | Weintek Weincloud Improper Handling of Structural Elements |
| CVE-2023-35134 | WE Weincloud Weintek | 5.9 | Jul 19 | Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password |
| CVE-2023-0104 | EP Easybuilder Pro Weintek | 7.8 | Feb 22 | The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file |
| CVE-2021-27446 | CF Cmt-svr-100 Firmware Weintek | 9.8 | May 16 | The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system |
| CVE-2021-27444 | CF Cmt-svr-100 Firmware Weintek | 9.8 | May 16 | The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information… |
| CVE-2021-27442 | CF Cmt-svr-100 Firmware Weintek | 6.1 | May 16 | The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code |