Weintek cMT-3072XH2 FTP Credential Storage Vulnerability

A vulnerability exists in the Weintek cMT-3072XH2 HMI device, specifically in easyweb version 2.1.53 and OS version 20231011. The vulnerability involves the storage of user credentials, including passwords, in plaintext within a local database file. This lack of encryption or hashing exposes sensitive authentication data, creating a risk if the database file is accessed.

Impact

Exploitation of this vulnerability leads to the exposure of user credentials, including passwords, allowing unauthorized access to the affected HMI system.