Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-5777

Weintek EasyBuilder Pro Use of Hard-coded Credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Weintek EasyBuilder Pro

Default version status: unaffected

  • 0 to < v6.07.02affected
  • 0 to ≤ 6.08.01.592affected
  • 0 to ≤ 6.08.02.470affected

References