Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db.
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Easyweb | Weintek | 2.1.53 (including) | 2.1.53 (including) |
| Cmt-3072xh2_firmware | Weintek | 20231011 (including) | 20231011 (including) |