CVE-2024-55025

Mô tả

Tham khảo

• gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de · Third Party Advisory
• plain-trick-71d.notion.site/weintek-cMT-3072XH2-14687a89c4c181eeb21ad61e0392f34b · Third Party Advisory

Lỗ hổng khác của easyweb

• CVE-2024-55027CAO 7.5Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.
• CVE-2024-55026NGHIÊM TRỌNG 9.8An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrar…
• CVE-2024-55024NGHIÊM TRỌNG 9.8An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthoriz…
• CVE-2024-55023TRUNG BÌNH 5.3Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access…
• CVE-2024-55022CAO 8.8Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Nam…