PT-2026-22778 · Weintek · Easyweb+1

CVE-2024-55021

·

Publicado

2026-03-03

·

Atualizado

2026-03-03

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Weintek cMT-3072XH2 easyweb version 2.1.53, OS version 20231011
Description The software contains a hardcoded password within the FTP protocol. This could allow unauthorized access.
Recommendations Update to a newer version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

OS Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-798CWE-78

Identificadores relacionados

CVE-2024-55021

Produtos afetados

Cmt-3072Xh2
Easyweb