CVEvulnerability

CVE-2023-5777

9.8 CRITICAL Published 2023-11-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-798

Description

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server.

Affected configurations

• weintek easybuilder pro (< 6.07.02) • weintek easybuilder pro (>= 6.08.01.190 < 6.08.01.614) • weintek easybuilder pro (>= 6.08.02 < 6.08.02.500)

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References