PatchTheCVEeasyweb vulnerabilities and fixes
Recent CVEs affecting easyweb, with upgrade or downgrade steps. 9 tracked.
easyweb has 9 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-03-03. Highest priority: CVE-2024-55020 (score 59/100).
- CVE-2024-55027 HIGH 7.5 DOWNGRADE MITIGATE Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the comp
- CVE-2024-55026 CRITICAL 9.8 DOWNGRADE MITIGATE An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized
- CVE-2024-55025 MEDIUM 6.5 DOWNGRADE MITIGATE Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unau
- CVE-2024-55024 CRITICAL 9.8 DOWNGRADE MITIGATE An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53,
- CVE-2024-55023 MEDIUM 5.3 DOWNGRADE MITIGATE Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which c
- CVE-2024-55022 HIGH 8.8 DOWNGRADE MITIGATE Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection
- CVE-2024-55021 HIGH 7.5 DOWNGRADE MITIGATE Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP pr
- CVE-2024-55020 CRITICAL 9.8 DOWNGRADE MITIGATE A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2
- CVE-2024-55019 HIGH 7.5 DOWNGRADE MITIGATE Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53,
FAQ
How do I fix easyweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is easyweb being exploited right now?
None of the tracked easyweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which easyweb CVE should I patch first?
CVE-2024-55020 currently ranks highest (59/100): A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.