HIGH🇵🇱 Wersja polska

CVE-2024-55019

CVSS 7.5v3.1pub. 2026-03-03upd. 2026-03-04

Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary files.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Weintek Cmt 3072xh2

    HW
    Weintek
    wszystkie wersje

  • Weintek Cmt 3072xh2 Firmware

    OS
    Weintek
    20231011

  • Weintek Easyweb

    APP
    Weintek
    2.1.53
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-55020CRITICAL9.8PL ✓ten sam produkt

Command injection z uprawnieniami root w Weintek cMT-3072XH2 easyweb

CVE-2024-55024CRITICAL9.8PL ✓ten sam produkt

Pominięcie uwierzytelniania w Weintek cMT-3072XH2 easyweb — dostęp administracyjny

CVE-2024-55026CRITICAL9.8PL ✓ten sam produkt

Wykonanie dowolnych poleceń przez endpoint reset_pj.cgi w Weintek cMT-3072XH2

CVE-2024-55027HIGH7.5ten sam produkt

Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the comp...

CVE-2024-55021HIGH7.5ten sam produkt

Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP pr...