critical9.8
CVE-2024-55026
An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supp…
Impact
An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Weintek | Easyweb | Version 2.1.53 |
| Weintek | Cmt-3072xh2 Firmware | Version 20231011 |