CVE-2024-55021
Received Received - Intake
Hardcoded FTP Password in Weintek cMT-3072XH2 Easyweb

Publication date: 2026-03-03

Last updated on: 2026-03-09

Assigner: MITRE

Description
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-03
Last Modified
2026-03-09
Generated
2026-06-16
AI Q&A
2026-03-03
EPSS Evaluated
2026-06-15
NVD
CVE-2024-55021
EUVD
EUVD-2024-55460
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
weintek easyweb 2.1.53
weintek cmt-3072xh2_firmware 20231011
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves the Weintek cMT-3072XH2 easyweb version 2.1.53, OS version 20231011, which contains a hardcoded password in its FTP protocol implementation.

Impact Analysis

The presence of a hardcoded password in the FTP protocol can allow unauthorized access to the device or system, potentially leading to unauthorized data access or control over the device.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2024-55021. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart