← Database

CVE-2024-55019

HIGH CVSS: 7.5 Published: 2026-03-03 Modified: 2026-06-17

Description

Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary files.

Affected Platforms

Weintek EasywebWeintek Cmt-3072Xh2Weintek Cmt-3072Xh2 Firmware

Weakness Type

CWE-284

References