NetSight
critical9.8

CVE-2024-55020

A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute a…

Impact

A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary commands with root privileges.

Affected products

VendorProductAffected versions
WeintekEasyweb
Version 2.1.53
WeintekCmt-3072xh2 Firmware
Version 20231011

Weakness classification

References