Weintek records

22 published records for vendor weintek.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 3
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

22 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2021-27446No exploit	Weintek EasyWeb cMT Code Injectionweintek · cmt-svr-100 firmware · CWE-94 pre-auth RCE	Critical9.8	—	2.9%	May 16, 2022
40Plan	CVE-2024-55020No exploit	A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attweintek · easyweb · CWE-20 pre-auth RCE Command injection	Critical9.8	—	1.6%	Mar 3, 2026
39Monitor	CVE-2023-38584No exploit	Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflowweintek · cmt-fhd firmware · CWE-121 Pre-auth Memory safety	Critical9.8	—	1.3%	Oct 19, 2023
39Monitor	CVE-2021-27444No exploit	Weintek EasyWeb cMT Improper Access Controlweintek · cmt-svr-100 firmware · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	1.1%	May 16, 2022
39Monitor	CVE-2023-43492No exploit	Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflowweintek · cmt-fhd firmware · CWE-121 Pre-auth Memory safety	Critical9.8	—	1.1%	Oct 19, 2023
39Monitor	CVE-2023-5777No exploit	Weintek EasyBuilder Pro Use of Hard-coded Credentialsweintek · easybuilder pro · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	0.5%	Nov 6, 2023
39Monitor	CVE-2024-55024No exploit	An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorizweintek · easyweb · CWE-693 Pre-auth Auth bypass	Critical9.8	—	0.3%	Mar 3, 2026
39Monitor	CVE-2024-55026No exploit	An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrarweintek · easyweb · CWE-256 pre-auth RCE	Critical9.8	—	0.3%	Mar 3, 2026
38Monitor	CVE-2023-0104No exploit	The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file.weintek · easybuilder pro · CWE-29	High7.8	—	21.8%	Feb 22, 2023
36Monitor	CVE-2023-50466No exploit	An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows attackers to execute arweintek · cmt2078x firmware · CWE-78 RCE Command injection	High8.8	—	1.9%	Dec 19, 2023
35Monitor	CVE-2023-40145No exploit	Weintek cMT3000 HMI Web CGI OS Command Injectionweintek · cmt-fhd firmware · CWE-78 RCE Command injection	High8.8	—	1.4%	Oct 19, 2023
35Monitor	CVE-2024-55022No exploit	Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Namweintek · easyweb · CWE-94 RCE Command injection	High8.8	—	1.3%	Mar 3, 2026
35Monitor	CVE-2023-37362No exploit	Weintek Weincloud Improper Authenticationweintek · weincloud · CWE-522 Auth bypass Info leak	High8.8	—	0.6%	Jul 19, 2023
30Monitor	CVE-2023-34429No exploit	Weintek Weincloud Improper Handling of Structural Elementsweintek · weincloud · CWE-237 Pre-auth Denial of service	High7.5	—	0.6%	Jul 19, 2023
30Monitor	CVE-2023-32657No exploit	Weintek Weincloud Improper Restriction of Excessive Authentication Attemptsweintek · weincloud · CWE-307 Pre-auth	High7.5	—	0.5%	Jul 19, 2023
30Monitor	CVE-2024-55021No exploit	Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol.weintek · easyweb · CWE-798 Pre-auth Hard-coded credentials	High7.5	—	0.3%	Mar 3, 2026
30Monitor	CVE-2024-55019No exploit	Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthentiweintek · easyweb · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Mar 3, 2026
30Monitor	CVE-2024-55027No exploit	Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.weintek · easyweb · CWE-312 Pre-auth	High7.5	—	0.2%	Mar 3, 2026
26Monitor	CVE-2024-55025No exploit	Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access tweintek · easyweb · CWE-284 Pre-auth Broken access control (IDOR)	Medium6.5	—	0.3%	Mar 3, 2026
24Monitor	CVE-2021-27442No exploit	Weintek EasyWeb cMT Cross-site Scriptingweintek · cmt-svr-100 firmware · CWE-79 Pre-auth XSS	Medium6.1	—	0.9%	May 16, 2022
23Monitor	CVE-2023-35134No exploit	Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Passwordweintek · weincloud · CWE-640 Pre-auth	Medium5.9	—	0.4%	Jul 19, 2023
21Monitor	CVE-2024-55023No exploit	Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to accessweintek · easyweb · CWE-798 Pre-auth Hard-coded credentials	Medium5.3	—	0.1%	Mar 3, 2026

CVE-2021-27446
40Plan
Weintek EasyWeb cMT Code Injection
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
weintek · cmt-svr-100 firmwareMay 16, 2022
CVE-2024-55020
40Plan
A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows att
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
weintek · easywebMar 3, 2026
CVE-2023-38584
39Monitor
Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
weintek · cmt-fhd firmwareOct 19, 2023
CVE-2021-27444
39Monitor
Weintek EasyWeb cMT Improper Access Control
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
weintek · cmt-svr-100 firmwareMay 16, 2022
CVE-2023-43492
39Monitor
Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
weintek · cmt-fhd firmwareOct 19, 2023
CVE-2023-5777
39Monitor
Weintek EasyBuilder Pro Use of Hard-coded Credentials
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
weintek · easybuilder proNov 6, 2023
CVE-2024-55024
39Monitor
An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthoriz
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
weintek · easywebMar 3, 2026
CVE-2024-55026
39Monitor
An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrar
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
weintek · easywebMar 3, 2026
CVE-2023-0104
38Monitor
The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file.
HighCVSS 7.8No exploitEPSS 21%
weintek · easybuilder proFeb 22, 2023
CVE-2023-50466
36Monitor
An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows attackers to execute ar
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
weintek · cmt2078x firmwareDec 19, 2023
CVE-2023-40145
35Monitor
Weintek cMT3000 HMI Web CGI OS Command Injection
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
weintek · cmt-fhd firmwareOct 19, 2023
CVE-2024-55022
35Monitor
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Nam
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
weintek · easywebMar 3, 2026
CVE-2023-37362
35Monitor
Weintek Weincloud Improper Authentication
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
- Info leak
weintek · weincloudJul 19, 2023
CVE-2023-34429
30Monitor
Weintek Weincloud Improper Handling of Structural Elements
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
weintek · weincloudJul 19, 2023
CVE-2023-32657
30Monitor
Weintek Weincloud Improper Restriction of Excessive Authentication Attempts
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
weintek · weincloudJul 19, 2023
CVE-2024-55021
30Monitor
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
weintek · easywebMar 3, 2026
CVE-2024-55019
30Monitor
Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenti
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
weintek · easywebMar 3, 2026
CVE-2024-55027
30Monitor
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
weintek · easywebMar 3, 2026
CVE-2024-55025
26Monitor
Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access t
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
weintek · easywebMar 3, 2026
CVE-2021-27442
24Monitor
Weintek EasyWeb cMT Cross-site Scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
weintek · cmt-svr-100 firmwareMay 16, 2022
CVE-2023-35134
23Monitor
Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
weintek · weincloudJul 19, 2023
CVE-2024-55023
21Monitor
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
weintek · easywebMar 3, 2026