Weintek vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-61892 Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.High 8.7 · Jul 24, 2026
• CVE-2026-61886 Weintek cMT3092X HMI stores user account passwords in plaintext.High 7.1 · Jul 24, 2026
• CVE-2026-60135 An attacker can modify data that should be restricted to read‑only access.High 7.1 · Jul 24, 2026
• CVE-2026-60134 Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.High 8.7 · Jul 24, 2026
• CVE-2024-55027 Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.High 7.5 · Mar 3, 2026
• CVE-2024-55026 An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplCritical 9.8 · Mar 3, 2026
• CVE-2024-55024 An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perfCritical 9.8 · Mar 3, 2026
• CVE-2024-55022 Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter.High 8.8 · Mar 3, 2026
• CVE-2024-55021 Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol.High 7.5 · Mar 3, 2026
• CVE-2024-55020 A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arCritical 9.8 · Mar 3, 2026
• CVE-2024-55019 Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to downHigh 7.5 · Mar 3, 2026
• CVE-2025-14751 A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege escalaHigh 8.7 · Jan 22, 2026
• CVE-2025-14750 The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable.High 8.7 · Jan 22, 2026
• CVE-2023-50466 An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows attackers to execute arbitrary code or acceHigh 8.8 · Dec 19, 2023
• CVE-2023-5777 Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the Critical 9.8 · Nov 6, 2023
• CVE-2023-43492 In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijCritical 9.8 · Oct 19, 2023
• CVE-2023-40145 In Weintek's cMT3000 HMI Web CGI device, an anonymous attacker can execute arbitrary commands after login to the device.High 8.8 · Oct 19, 2023
• CVE-2023-38584 In Weintek's cMT3000 HMI Web CGI device, the cgi-bin command_wb.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hiCritical 9.8 · Oct 19, 2023
• CVE-2023-37362 Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credentials to the official website.High 7.2 · Jul 19, 2023
• CVE-2023-35134 Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token only.High 7.4 · Jul 19, 2023
• CVE-2023-34429 Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.High 7.5 · Jul 19, 2023
• CVE-2023-0104 The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file.Critical 9.3 · Feb 22, 2023
• CVE-2021-27446 The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on theCritical 10 · May 16, 2022
• CVE-2021-27444 The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensCritical 9.8 · May 16, 2022
• CVE-2021-27442 The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavCritical 9.4 · May 16, 2022