High severity7.5NVD Advisory· Published Mar 3, 2026· Updated Jun 17, 2026

CVE-2024-55019

Description

Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Weintek/easyweb
cpe:2.3:a:weintek:easyweb:2.1.53:*:*:*:*:*:*:*
Weintek/Cmt 3072xh2 Firmware
cpe:2.3:o:weintek:cmt-3072xh2_firmware:20231011:*:*:*:*:*:*:*
Weintek/cMT-3072XH2cpe-rescue
Weintek/easyweb Web Versionllm-fuzzy
Range: v2.1.53

Patches

Vulnerability mechanics

References

gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622denvdThird Party Advisory
plain-trick-71d.notion.site/weintek-cMT-3072XH2-14687a89c4c181eeb21ad61e0392f34bnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000