CVE-2024-55027

W

eintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:weintek:easyweb:2.1.53:*:*:*:*:*:*:*
cpe:2.3:o:weintek:cmt-3072xh2_firmware:20231011:*:*:*:*:*:*:*
cpe:2.3:h:weintek:cmt-3072xh2:-:*:*:*:*:*:*:*

History

04 Mar 2026, 18:48

Type Values Removed Values Added
References () https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de - () https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de - Third Party Advisory
References () https://plain-trick-71d.notion.site/weintek-cMT-3072XH2-14687a89c4c181eeb21ad61e0392f34b?pvs=4 - () https://plain-trick-71d.notion.site/weintek-cMT-3072XH2-14687a89c4c181eeb21ad61e0392f34b?pvs=4 - Third Party Advisory
CPE cpe:2.3:h:weintek:cmt-3072xh2:-:*:*:*:*:*:*:*
cpe:2.3:a:weintek:easyweb:2.1.53:*:*:*:*:*:*:*
cpe:2.3:o:weintek:cmt-3072xh2_firmware:20231011:*:*:*:*:*:*:*
First Time Weintek cmt-3072xh2
Weintek
Weintek cmt-3072xh2 Firmware
Weintek easyweb
CWE CWE-312

04 Mar 2026, 15:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CWE CWE-798

03 Mar 2026, 20:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-03-03 20:16

Updated : 2026-03-04 18:48


NVD link : CVE-2024-55027

Mitre link : CVE-2024-55027

CVE.ORG link : CVE-2024-55027


JSON object : View

CWE
CWE-312

Cleartext Storage of Sensitive Information

CWE-798

Use of Hard-coded Credentials