CVE-2024-55027
Received Received - Intake

Plaintext Credential Storage in Weintek cMT-3072XH2 uac_temp.db

Publication date: 2026-03-03

Last updated on: 2026-03-04

Assigner: MITRE

Description
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-03-03
Last Modified
2026-03-04
Generated
2026-07-06
AI Q&A
2026-03-03
EPSS Evaluated
2026-07-05
NVD
CVE-2024-55027
EUVD
EUVD-2024-55466

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
weintek easyweb 2.1.53
weintek cmt-3072xh2_firmware 20231011

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-312 The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves the Weintek cMT-3072XH2 easyweb version 2.1.53, OS version 20231011, where credentials are stored in plaintext within the component named uac_temp.db.

Impact Analysis

Storing credentials in plaintext can allow unauthorized individuals who gain access to the uac_temp.db file to easily read and misuse these credentials, potentially leading to unauthorized access to the system or sensitive data.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2024-55027. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart