← Database

CVE-2024-55020

CRITICAL CVSS: 9.8 Published: 2026-03-03 Modified: 2026-06-17

Description

A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary commands with root privileges.

Affected Platforms

Weintek EasywebWeintek Cmt-3072Xh2Weintek Cmt-3072Xh2 Firmware

Weakness Type

CWE-20, CWE-78

References