PT-2026-22781 · Weintek · Cmt-3072Xh2+1

Published 2026-03-03 · Updated 2026-03-04 · CVE-2024-55024

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Weintek cMT-3072XH2 easyweb version 2.1.53, OS version 20231011

Description An authentication bypass exists in the authorization mechanism of the software. This allows unauthorized attackers to perform administrative actions using service accounts.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2024-55024

Affected Products

Cmt-3072Xh2

Easyweb

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-55024 · Security Note
• https://osv.dev/vulnerability/CVE-2024-55024 · Vendor Advisory
• https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de · Note
• https://twitter.com/infoflowcloud/status/2028932472746979357 · Twitter Post
• https://twitter.com/CVEnew/status/2028930732068905446 · Twitter Post
• https://plain-trick-71d.notion.site/weintek-cMT-3072XH2-14687a89c4c181eeb21ad61e0392f34b?pvs=4 · Note
• https://twitter.com/VulmonFeeds/status/2029003580456202605 · Twitter Post
• https://twitter.com/CveFindCom/status/2028933773966835756 · Twitter Post