CVE-2024-55020

概要

参考情報

• gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de · Third Party Advisory
• plain-trick-71d.notion.site/weintek-cMT-3072XH2-14687a89c4c181eeb21ad61e0392f34b · Third Party Advisory

easyweb のその他の脆弱性

• CVE-2024-55027高 7.5Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.
• CVE-2024-55026緊急 9.8An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrar…
• CVE-2024-55025中 6.5Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access t…
• CVE-2024-55024緊急 9.8An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthoriz…
• CVE-2024-55023中 5.3Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access…