EasyWeb vulnerabilities

5 known vulnerabilities in EasyWeb from Weintek. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Easyweb: Plaintext Storage of a Password

  CVE-2024-55026Mar 3, 2026Weintek

  An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET request.

• 9.8 Critical severity

  Easyweb: Protection Mechanism Failure

  CVE-2024-55024Mar 3, 2026Weintek

  An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative actions using service accounts.

• 8.8 High severity

  Easyweb: Improper Control of Generation of Code

  CVE-2024-55022Mar 3, 2026WeintekEPSS 1.49%

  Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter.

• 9.8 Critical severity

  A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2…

  CVE-2024-55020Mar 3, 2026WeintekEPSS 1.84%

  A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary commands with root privileges.

• 7.5 High severity

  Easyweb: Improper Access Control

  CVE-2024-55019Mar 3, 2026Weintek

  Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary files.