Weintek vulnerabilities

Products

• Easyweb 13
• Cmt-3072xh2 Firmware 9
• Cmt3071 Firmware 6
• Cmt3072 Firmware 6
• Cmt3090 Firmware 6
• Cmt3103 Firmware 6
• Cmt3151 Firmware 6
• Cmt-fhd 6
• Cmt-fhd Firmware 6
• Cmt-hdm 6
• Cmt-hdm Firmware 6
• Cmt-ctrl01 5
• Cmt3092x Firmware 4
• Weincloud 4
• Cmt3071 3
• Cmt3071/cmt3072/cmt3090/cmt3103/cmt3151 3
• Cmt3072 3
• Cmt3090 3
• Cmt3103 3
• Cmt3151 3
• Cmt-ctrl01 Firmware 3
• Cmt-g01 Firmware 3
• Cmt-g01/g02 3
• Cmt-g02 Firmware 3
• Cmt-g03 Firmware 3
• Cmt-g03/g04 3
• Cmt-g04 Firmware 3
• Cmt-svr-100 Firmware 3
• Cmt-svr-102 Firmware 3
• Cmt-svr-1xx/2xx 3
• Cmt-svr-200 Firmware 3
• Cmt-svr-202 Firmware 3
• Cmt3072xh 2
• Cmt3072xh(t) 2
• Cmt-svrx-820 2
• Easybuilder Pro 2

Newest

• weintek cmt3092x firmware, easyweb +1 more Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision CVE-2026-60134 8.7 HighJuly 24, 2026
• weintek cmt3092x firmware, easyweb +1 more Weintek cMT3092X Incorrect Permission Assignment for Critical Resource CVE-2026-61892 8.7 HighJuly 24, 2026
• weintek cmt3092x firmware, easyweb +1 more Weintek cMT3092X Plaintext Storage of a Password CVE-2026-61886 7.1 HighJuly 24, 2026
• weintek cmt3092x firmware, easyweb +1 more Weintek cMT3092X Incorrect User Management CVE-2026-60135 7.1 HighJuly 24, 2026
• weintek easyweb, cmt-3072xh2 firmware +1 more Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in... CVE-2024-55027 7.5 HighMarch 3, 2026
• weintek easyweb, cmt-3072xh2 firmware +1 more An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows... CVE-2024-55026 9.8 CriticalMarch 3, 2026
• weintek easyweb, cmt-3072xh2 firmware +1 more Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS... CVE-2024-55025 6.5 MediumMarch 3, 2026
• weintek easyweb, cmt-3072xh2 firmware +1 more An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2... CVE-2024-55024 9.8 CriticalMarch 3, 2026
• weintek easyweb, cmt-3072xh2 firmware +1 more Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded... CVE-2024-55023 5.3 MediumMarch 3, 2026
• weintek easyweb, cmt-3072xh2 firmware +1 more Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated... CVE-2024-55022 8.8 HighMarch 3, 2026
• weintek easyweb, cmt-3072xh2 firmware +1 more Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password... CVE-2024-55021 7.5 HighMarch 3, 2026
• weintek easyweb, cmt-3072xh2 firmware +1 more A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb... CVE-2024-55020 9.8 CriticalMarch 3, 2026
• weintek easyweb, cmt-3072xh2 firmware +1 more Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web... CVE-2024-55019 7.5 HighMarch 3, 2026
• weintek cmt-ctrl01, cmt-svrx-820, cmt3072xh +1 more +3 more Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service CVE-2025-14751 8.7 HighJanuary 22, 2026
• weintek cmt-ctrl01, cmt-svrx-820, cmt3072xh +1 more +3 more External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service CVE-2025-14750 8.7 HighJanuary 22, 2026
• weintek cmt2078x firmware An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3,... CVE-2023-50466 8.8 HighDecember 19, 2023
• weintek easybuilder pro Weintek EasyBuilder Pro Use of Hard-coded Credentials CVE-2023-5777 9.8 CriticalNovember 6, 2023
• weintek cmt-fhd, cmt-fhd firmware, cmt-hdm +11 more +13 more Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow CVE-2023-43492 9.8 CriticalOctober 19, 2023
• weintek cmt-fhd, cmt-fhd firmware, cmt-hdm +11 more +13 more Weintek cMT3000 HMI Web CGI OS Command Injection CVE-2023-40145 8.8 HighOctober 19, 2023
• weintek cmt-fhd, cmt-fhd firmware, cmt-hdm +11 more +13 more Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow CVE-2023-38584 9.8 CriticalOctober 19, 2023
• weintek weincloud Weintek Weincloud Improper Authentication CVE-2023-37362 7.2 HighJuly 19, 2023
• weintek weincloud Weintek Weincloud Improper Restriction of Excessive Authentication Attempts CVE-2023-32657 5.3 MediumJuly 19, 2023
• weintek weincloud Weintek Weincloud Improper Handling of Structural Elements CVE-2023-34429 7.5 HighJuly 19, 2023
• weintek weincloud Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password CVE-2023-35134 7.4 HighJuly 19, 2023
• weintek easybuilder pro, easybuilder pro cmt +1 more The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by... CVE-2023-0104 EPSS 21.8% 9.3 CriticalFebruary 22, 2023
• weintek cmt-ctrl01, cmt-ctrl01 firmware, cmt-fhd +20 more +22 more Weintek EasyWeb cMT Code Injection CVE-2021-27446 10.0 CriticalMay 16, 2022
• weintek cmt-ctrl01, cmt-ctrl01 firmware, cmt-fhd +20 more +22 more Weintek EasyWeb cMT Improper Access Control CVE-2021-27444 9.8 CriticalMay 16, 2022
• weintek cmt-ctrl01, cmt-ctrl01 firmware, cmt-fhd +20 more +22 more Weintek EasyWeb cMT Cross-site Scripting CVE-2021-27442 9.4 CriticalMay 16, 2022