PT-2026-22779 · Weintek · Cmt-3072Xh2+1

CVE-2024-55022 · Publicado 2026-03-03 · Atualizado 2026-03-04

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Weintek cMT-3072XH2 easyweb version 2.1.53, OS version 20231011

Description The software contains an authenticated command injection issue. The issue is triggered via the HMI Name parameter. An attacker with valid credentials can inject commands.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2024-55022

Produtos afetados

Cmt-3072Xh2

Easyweb

Referências · 7

• https://twitter.com/VulmonFeeds/status/2029011260134543526 · Publicação no Twitter
• https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de · Nota
• https://osv.dev/vulnerability/CVE-2024-55022 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2028930730152067450 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2024-55022 · Nota de Segurança
• https://plain-trick-71d.notion.site/weintek-cMT-3072XH2-14687a89c4c181eeb21ad61e0392f34b?pvs=4 · Nota
• https://t.me/cveNotify/154119 · Publicação no Telegram