16 matches found
EUVD-2026-48748
Weintek cMT3092X HMI stores user account passwords in plaintext...
EUVD-2026-48749
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges...
EUVD-2026-48750
Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...
CVE-2026-61886
Weintek cMT3092X HMI stores user account passwords in plaintext...
CVE-2026-60134 Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision
Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...
CVE-2026-60134
Vulnerability: CVE-2026-60134 affects the Weintek cMT3092X HMI due to reliance on cookies without proper validation and integrity checks in a security decision. What’s affected: Weintek cMT3092X HMI. The description states that a non-privileged user can modify cookies to achieve elevated privileg...
CVE-2026-61892 Weintek cMT3092X Incorrect Permission Assignment for Critical Resource
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges...
CVE-2026-61892 Weintek cMT3092X Incorrect Permission Assignment for Critical Resource
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges...
CVE-2026-61892
The CVE-2026-61892 entry applies to Weintek cMT3092X HMI. The vulnerability concerns insufficient permission handling that lets a non-privileged user modify tokens to escalate privileges, yielding a high-severity impact on confidentiality, integrity, and availability per the ICS CVSS metrics (sco...
CVE-2026-61886
Weintek cMT3092X HMI is affected by CVE-2026-61886 due to plaintext storage of user account passwords. The vulnerability resides in how credentials are stored, enabling potential exposure of confidential data. Affected component: Weintek cMT3092X HMI (password storage mechanism). Root cause: plai...
CVE-2026-61886 Weintek cMT3092X Plaintext Storage of a Password
Weintek cMT3092X HMI stores user account passwords in plaintext...
CVE-2026-61886 Weintek cMT3092X Plaintext Storage of a Password
Weintek cMT3092X HMI stores user account passwords in plaintext...
CVE-2026-60135 Weintek cMT3092X Incorrect User Management
An attacker can modify data that should be restricted to read‑only access...
CVE-2026-61892: Incorrect Permission Assignment for Critical Resource
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges...
CVE-2026-60134: Reliance on Cookies without Validation and Integrity Checking in a Security Decision
Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...