← Database

CVE-2024-55024

CRITICAL CVSS: 9.8 Published: 2026-03-03 Modified: 2026-06-17

Description

An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative actions using service accounts.

Affected Platforms

Weintek EasywebWeintek Cmt-3072Xh2Weintek Cmt-3072Xh2 Firmware

Weakness Type

CWE-693

References