PT-2026-22779 · Weintek · Cmt-3072Xh2+1

Published 2026-03-03 · Updated 2026-03-04 · CVE-2024-55022

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Weintek cMT-3072XH2 easyweb version 2.1.53, OS version 20231011

Description The software contains an authenticated command injection issue. The issue is triggered via the HMI Name parameter. An attacker with valid credentials can inject commands.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-55022

Affected Products

Cmt-3072Xh2

Easyweb

References · 7

• https://osv.dev/vulnerability/CVE-2024-55022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-55022 · Security Note
• https://twitter.com/VulmonFeeds/status/2029011260134543526 · Twitter Post
• https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de · Note
• https://twitter.com/CVEnew/status/2028930730152067450 · Twitter Post
• https://plain-trick-71d.notion.site/weintek-cMT-3072XH2-14687a89c4c181eeb21ad61e0392f34b?pvs=4 · Note
• https://t.me/cveNotify/154119 · Telegram Post