HIGH🇵🇱 Wersja polska

CVE-2024-55022

CVSS 8.8v3.1pub. 2026-03-03upd. 2026-03-09

Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Weintek Cmt 3072xh2

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt 3072xh2 Firmware

    OS
    Weintek
    20231011

  • Weintek Easyweb

    APP
    Weintek
    2.1.53
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-55026CRITICAL9.8PL ✓ten sam produkt

Wykonanie dowolnych poleceń przez endpoint reset_pj.cgi w Weintek cMT-3072XH2

CVE-2024-55024CRITICAL9.8PL ✓ten sam produkt

Pominięcie uwierzytelniania w Weintek cMT-3072XH2 easyweb — dostęp administracyjny

CVE-2024-55020CRITICAL9.8PL ✓ten sam produkt

Command injection z uprawnieniami root w Weintek cMT-3072XH2 easyweb

CVE-2024-55027HIGH7.5ten sam produkt

Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the comp...

CVE-2024-55021HIGH7.5ten sam produkt

Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP pr...