Weintek cMT-3072XH2 Authentication Bypass Vulnerability in Authorization Mechanism

An authentication bypass vulnerability has been identified in the Weintek cMT-3072XH2 HMI product, specifically in easyweb version 2.1.53 and OS version 20231011. This vulnerability allows unauthorized attackers to perform administrative actions using built-in service accounts. The issue arises from improper authorization checks in the web interface, enabling exploitation through various CGI endpoints and system services.

Impact

Exploitation of this vulnerability allows unauthorized users to bypass authentication and authorization mechanisms, gaining administrative access and the ability to execute arbitrary commands with elevated privileges. This could lead to a full compromise of the HMI system and the industrial processes it controls.