Medium · 6.5 CVE-2024-55019 EUVD-2024-55458GHSA-m7fq-9qq3-3x9g

Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthent…

Published Mar 3, 2026 · Updated Mar 3, 2026 · Assigned by mitre

Description

Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary files.

References

https://plain-trick-71d.notion.site/weintek-cMT-3072XH2-14687a89c4c181eeb21ad61e0392f34b?pvs=4
https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de