anonhaven
Ad

CVE-2024-55021

HIGH CVSS 3.1: 7.5 EPSS 0.05%
Updated Mar 04, 2026
Weintek
Parameter Value
CVSS 7.5 (HIGH)
Type CWE-78 (OS Command Injection)
Vendor Weintek
Public PoC No

Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
None
No disruption

CVSS Vector v3.1

Weakness Type (CWE)

CWE-78 OS Command Injection

References 2

https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de
cve@mitre.org
https://plain-trick-71d.notion.site/weintek-cMT-3072XH2-14687a89c4c181eeb21ad61…
cve@mitre.org
Share Post Share Share Share