CISA warns of Weintek cMT3092X flaws, says vendor patch is the only fix
CISA says multiple vulnerabilities in Weintek cMT3092X HMI devices affect older firmware and EasyWeb versions, with a patch-only update available from the vendor.
CISA on July 23, 2026, published an advisory on multiple vulnerabilities in Weintek cMT3092X human-machine interface devices, saying the flaws affect firmware earlier than 20210218 and EasyWeb earlier than v2.1.20.
The advisory says successful exploitation could allow a non-privileged user to escalate privileges or view other users’ credentials. CISA also said the devices are used in the Critical Manufacturing sector and are deployed worldwide.
What CISA found
CISA listed four vulnerabilities. One involves modifying cookies to gain elevated privileges, which CISA identified as CVE-2026-60134 and mapped to CWE-784. It carries a CVSS v3.1 score of 8.8, rated High, and a CVSS v4.0 score of 8.7, also High.
A second issue involves modifying tokens to escalate privileges. CISA identified that as CVE-2026-61892, mapped it to CWE-732, and rated it 8.8 High under CVSS v3.1 and 8.7 High under CVSS v4.0.
The remaining two issues are plaintext storage of user account passwords, identified as CVE-2026-61886 and mapped to CWE-256, and modification of data that should be read-only, identified as CVE-2026-60135 and mapped to CWE-286. CISA gave the password issue a CVSS v3.1 score of 6.5, Medium, and a CVSS v4.0 score of 7.1, High. It gave the read-only data issue a CVSS v3.1 score of 6.5, Medium, and a CVSS v4.0 score of 7.1, High.
Why it matters
The advisory said the product is used in industrial settings and is deployed worldwide, which can widen the impact of weaknesses that let an attacker gain higher privileges or access stored credentials. CISA also said Weintek is headquartered in Taiwan.
Background and vendor guidance
CISA cited a patch-only fix from Weintek. The vendor-recommended package is cmt_typeB_20260316_007.patch, which includes EasyWeb 2.3.17-typeb. According to the advisory and Weintek support materials, no separate standard firmware release is planned.
CISA linked to a Weintek technical document with more details. It also said no known public exploitation specifically targeting these vulnerabilities had been reported to CISA at the time of publication.
What officials said
The advisory credits Vincenzo Giuseppe Colacino of Secoore with reporting the vulnerabilities to CISA.
CISA’s advisory and Weintek support page say users may request the patch from Weintek support or distributors.
What happens next
Operators using affected cMT3092X firmware or EasyWeb versions will need to apply the vendor patch to address the flaws. CISA’s advisory remains the public reference for the affected versions, CVEs, and mitigation details.
Sources
Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.
Comments ()