Weintek
Vulnerability activity for Weintek: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 9
- Critical (CVSS 9+)
- 3
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 7.5HighMar 3, 2026Weintek easyweb Information disclosureCVE-2024-55027Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.
- 9.8CriticalMar 3, 2026Weintek easywebCVE-2024-55026An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET request.
- 6.5MediumMar 3, 2026Weintek easyweb Auth bypass / access controlCVE-2024-55025Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access the HMI system.
- 9.8CriticalMar 3, 2026Weintek easyweb Auth bypass / access controlCVE-2024-55024An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative actions using service accounts.
- 5.3MediumMar 3, 2026Weintek easyweb Auth bypass / access controlCVE-2024-55023Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information.
- 8.8HighMar 3, 2026Weintek easyweb Code / command injectionCVE-2024-55022Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter.1.5% likely
- 7.5HighMar 3, 2026Weintek easyweb Auth bypass / access controlCVE-2024-55021Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol.
- 9.8CriticalMar 3, 2026Weintek easyweb Code / command injectionCVE-2024-55020A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary commands with root privileges.1.8% likely
- 7.5HighMar 3, 2026Weintek easyweb Auth bypass / access controlCVE-2024-55019Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary files.
Top products
- easyweb9 CVEs in the last year, 3 critical
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.