PatchTheCVE: easywebhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-55027: Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the comphttps://patchthecve.com/cve/CVE-2024-55027.htmlhttps://patchthecve.com/cve/CVE-2024-55027.htmlWed, 17 Jun 2026 08:10:54 +0000HIGH 7.5: Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.CVE-2024-55026: An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorizedhttps://patchthecve.com/cve/CVE-2024-55026.htmlhttps://patchthecve.com/cve/CVE-2024-55026.htmlWed, 17 Jun 2026 08:10:54 +0000CRITICAL 9.8: An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET request.CVE-2024-55025: Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauhttps://patchthecve.com/cve/CVE-2024-55025.htmlhttps://patchthecve.com/cve/CVE-2024-55025.htmlWed, 17 Jun 2026 08:10:54 +0000MEDIUM 6.5: Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access the HMI system.CVE-2024-55024: An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, https://patchthecve.com/cve/CVE-2024-55024.htmlhttps://patchthecve.com/cve/CVE-2024-55024.htmlWed, 17 Jun 2026 08:10:54 +0000CRITICAL 9.8: An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative actions using service accounts.CVE-2024-55023: Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which chttps://patchthecve.com/cve/CVE-2024-55023.htmlhttps://patchthecve.com/cve/CVE-2024-55023.htmlWed, 17 Jun 2026 08:10:53 +0000MEDIUM 5.3: Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information.CVE-2024-55022: Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injectionhttps://patchthecve.com/cve/CVE-2024-55022.htmlhttps://patchthecve.com/cve/CVE-2024-55022.htmlWed, 17 Jun 2026 08:10:53 +0000HIGH 8.8: Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter.CVE-2024-55021: Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP prhttps://patchthecve.com/cve/CVE-2024-55021.htmlhttps://patchthecve.com/cve/CVE-2024-55021.htmlWed, 17 Jun 2026 08:10:53 +0000HIGH 7.5: Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol.CVE-2024-55020: A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2https://patchthecve.com/cve/CVE-2024-55020.htmlhttps://patchthecve.com/cve/CVE-2024-55020.htmlWed, 17 Jun 2026 08:10:53 +0000CRITICAL 9.8: A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary commands with root privileges.CVE-2024-55019: Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, https://patchthecve.com/cve/CVE-2024-55019.htmlhttps://patchthecve.com/cve/CVE-2024-55019.htmlWed, 17 Jun 2026 08:10:53 +0000HIGH 7.5: Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary files.