129 matches found
Weintek cMT-3072XH2 easyweb 安全漏洞
Weintek cMT-3072XH2 easyweb is an intelligent human-computer interaction interface developed by Weintek Company in Taiwan, China. The version v2.1.53 of Weintek cMT-3072XH2 easyweb contains a security vulnerability. This vulnerability stems from a command injection vulnerability in the DHCP...
Weintek cMT 安全漏洞
Weintek cMT is a human-computer interface application developed by Weintek Corporation. Version 2.1.53 of Weintek cMT contains a security vulnerability, which stems from the uactemp.db component storing credentials in plaintext...
Weintek cMT 安全漏洞
Weintek cMT is a human-machine interface application developed by Weintek Corporation. Version 2.1.53 of Weintek cMT contains a security vulnerability, which stems from command injection attacks involving the HMI Name parameter after authentication is performed...
PT-2026-22779
Name of the Vulnerable Software and Affected Versions Weintek cMT-3072XH2 easyweb version 2.1.53, OS version 20231011 Description The software contains an authenticated command injection issue. The issue is triggered via the HMI Name parameter. An attacker with valid credentials can inject...
CVE-2024-55023
Weintek cMT-3072XH2 easyweb v2.1.53 on OS v20231011 contains a hardcoded encryption key, enabling potential access to sensitive information (CVE-2024-55023). Affected component: easyweb (Weintek). Underlying cause: hardcoded key disclosed in description. Documented impact: confidentiality impact ...
CVE-2024-55019
Weintek cMT-3072XH2 easyweb Web Version v2.1.53 (OS v20231011) contains an access-control flaw in the download_wb.cgi component that allows unauthenticated users to download arbitrary files. The vulnerability is tied to incorrect access control in the relevant web interface, enabling potential da...
EUVD-2024-55459
A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary commands with root privileges...
PT-2026-22782
Name of the Vulnerable Software and Affected Versions Weintek cMT-3072XH2 easyweb version 2.1.53, OS version 20231011 Description An access control issue exists in the VNC component. This allows unauthorized attackers to access the HMI system. Recommendations Update to a newer version that...
CVE-2024-55025
Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access the HMI system...
PT-2026-22781
Name of the Vulnerable Software and Affected Versions Weintek cMT-3072XH2 easyweb version 2.1.53, OS version 20231011 Description An authentication bypass exists in the authorization mechanism of the software. This allows unauthorized attackers to perform administrative actions using service...
CVE-2024-55024
An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative actions using service accounts...
CVE-2025-14751 Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service
A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege escalation...
CVE-2025-14751 Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service
A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege escalation...
Weintek cMT X Series HMI EasyWeb Service
RISK EVALUATION Successful exploitation of these vulnerabilities could allow a low-level user to alter privileges and gain full control to the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...
Weintek cMT security vulnerabilities
Weintek cMT is a human-computer interface application developed by Weintek Corporation. There is a security vulnerability in Weintek cMT. This vulnerability stems from the insufficient validation of inputs that are assumed to be immutable but are actually externally controllable. This could allow...
Weintek cMT X Series security vulnerabilities
The Weintek cMT X Series is a series of intelligent human-computer interfaces developed by Weintek Company in Taiwan, China. The cMT X Series contains security vulnerabilities. These vulnerabilities allow low-privilege users to bypass account credentials without confirming the user’s current...
OSV-2026-2 Heap-buffer-overflow in cmt_mpack_consume_uint_tag
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=472785094 Crash type: Heap-buffer-overflow WRITE 8 Crash state: cmtmpackconsumeuinttag cmtmpackunpackarray cmtmpackunpackmap...
EUVD-2021-14196
Malware in sbrugna...