Read the docs
TI-2026-44282 Aliases CVE-2026-61886GHSA-hgch-6f8j-3xgx

Weintek cMT3092X Plaintext Storage of a Password

Priority LOW 31CWE-256Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-256.

Summary

Weintek cMT3092X HMI stores user account passwords in plaintext.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00402 34th percentileScored 2026-11-07
Fix Fixed cMT3092X firmware (Weintek): 20210218EasyWeb (Weintek): v2.1.20, 2.3.17-typeb

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
WeintekcMT3092X firmwarebefore 2021021820210218Patch availableCNA
WeintekEasyWebbefore v2.1.20v2.1.20, 2.3.17-typebPatch availableCNA
  • cMT3092X firmware VendorWeintek Affected before 20210218 Fixed in 20210218 Patch available CNA
  • EasyWeb VendorWeintek Affected before v2.1.20 Fixed in v2.1.20, 2.3.17-typeb Patch available CNA

Remediation

  • Fix · CNA cMT3092X firmware (Weintek) Fixed in 20210218
  • Fix · CNA EasyWeb (Weintek) Fixed in v2.1.20, 2.3.17-typeb

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Weintek EasyWeb, cMT3092X firmware 20210218, v2.1.20

    4 records Highest priority Priority MEDIUM 2 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2026-44284 Weintek cMT3092X Incorrect Permission Assignment for Critical ResourcePriority MEDIUM 40
    • TI-2026-42842 Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security DecisionPriority MEDIUM 40
    • TI-2026-42843 Weintek cMT3092X Incorrect User ManagementPriority LOW 31
    Show all 4 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-61886
  2. 2026-10-03 Alias added: GHSA-hgch-6f8j-3xgx

References

Other 3

  • TI-2024-36750 An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS… CVSS 3.1CRITICAL 9.8
  • TI-2024-36751 Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in… CVSS 3.1HIGH 7.5
  • TI-2024-36745 Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol. CVSS 3.1HIGH 7.5
  • TI-2023-00100 Path traversal in Weintek EasyBuilder Pro cMT CVSS 3.1CRITICAL 9.3
  • TI-2021-08933 Weintek EasyWeb cMT Code Injection CVSS 3.1CRITICAL 10.0
  • TI-2023-19957 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow CVSS 3.1CRITICAL 9.8
See all 27 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences