high7.5
CVE-2024-55019
Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to dow…
Impact
Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Weintek | Easyweb | Version 2.1.53 |
| Weintek | Cmt-3072xh2 Firmware | Version 20231011 |