CVE-2024-55024

The flaw exists in the authorization mechanism of the easyweb v2.1.53 application running on the operating system version OS v20231011. An attacker can remotely bypass the authentication procedure without possessing any credentials and gain access through service accounts. This results in the ability to perform administrative operations as if the attacker were an authorized user with the highest privileges.

An unauthorized attacker can perform arbitrary administrative actions on the device, which in an industrial environment can lead to disruption of production processes, modification of HMI controller configuration, and violation of data confidentiality and integrity.

Apply patches available from the manufacturer according to the references. Until the patch is applied, it is recommended to isolate HMI devices from untrusted networks, restrict network access to the easyweb panel using a firewall, and implement OT/IT network segmentation.

Weintek cMT-3072XH2 with easyweb software version 2.1.53 and operating system firmware OS v20231011