CVE-2024-55027
Received Received - Intake
Plaintext Credential Storage in Weintek cMT-3072XH2 uac_temp.db

Publication date: 2026-03-03

Last updated on: 2026-03-04

Assigner: MITRE

Description
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-03
Last Modified
2026-03-04
Generated
2026-06-16
AI Q&A
2026-03-03
EPSS Evaluated
2026-06-15
NVD
CVE-2024-55027
EUVD
EUVD-2024-55466
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
weintek easyweb 2.1.53
weintek cmt-3072xh2_firmware 20231011
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-312 The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves the Weintek cMT-3072XH2 easyweb version 2.1.53, OS version 20231011, where credentials are stored in plaintext within the component named uac_temp.db.

Impact Analysis

Storing credentials in plaintext can allow unauthorized individuals who gain access to the uac_temp.db file to easily read and misuse these credentials, potentially leading to unauthorized access to the system or sensitive data.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2024-55027. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart