CVE-2023-5777
Critical
Description
Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server.
SeverityCritical
CVSS9.8
Exploit probability—
ProductWeintek Easybuilder Pro
PublishedNov 6, 2023
First seenNov 6, 2023
Weakness typeCWE-798Hard-coded credentials
How to fix
Update
- weintek easybuilder_pro6.07.02, 6.08.01.614, 6.08.02.500 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| weintek easybuilder_pro | v < 6.07.02, 6.08.01.190 ≤ v < 6.08.01.614, 6.08.02 ≤ v < 6.08.02.500 | 6.07.02, 6.08.01.614, 6.08.02.500 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.