CVE-2024-55021
Received Received - Intake

Hardcoded FTP Password in Weintek cMT-3072XH2 Easyweb

Publication date: 2026-03-03

Last updated on: 2026-03-09

Assigner: MITRE

Description
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-03-03
Last Modified
2026-03-09
Generated
2026-07-06
AI Q&A
2026-03-03
EPSS Evaluated
2026-07-05
NVD
CVE-2024-55021
EUVD
EUVD-2024-55460

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
weintek easyweb 2.1.53
weintek cmt-3072xh2_firmware 20231011

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves the Weintek cMT-3072XH2 easyweb version 2.1.53, OS version 20231011, which contains a hardcoded password in its FTP protocol implementation.

Impact Analysis

The presence of a hardcoded password in the FTP protocol can allow unauthorized access to the device or system, potentially leading to unauthorized data access or control over the device.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2024-55021. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart