本ページは weintek easyweb に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2024-55027 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db. | [email protected] | 7.5 | 0.02% | 2026-03-03 | 2026-03-04 |
| CVE-2024-55026 | An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET request. | [email protected] | 9.8 | 0.07% | 2026-03-03 | 2026-03-04 |
| CVE-2024-55025 | Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access the HMI system. | [email protected] | 6.5 | 0.05% | 2026-03-03 | 2026-03-04 |
| CVE-2024-55024 | An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative actions using service accounts. | [email protected] | 9.8 | 0.06% | 2026-03-03 | 2026-03-04 |
| CVE-2024-55023 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information. | [email protected] | 5.3 | 0.02% | 2026-03-03 | 2026-03-09 |
| CVE-2024-55022 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter. | [email protected] | 8.8 | 0.35% | 2026-03-03 | 2026-03-09 |
| CVE-2024-55021 | Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol. | [email protected] | 7.5 | 0.05% | 2026-03-03 | 2026-03-09 |
| CVE-2024-55020 | A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary commands with root privileges. | [email protected] | 9.8 | 0.09% | 2026-03-03 | 2026-03-04 |
| CVE-2024-55019 | Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary files. | [email protected] | 7.5 | 0.04% | 2026-03-03 | 2026-03-04 |