CVE-2023-5777

Weintek EasyBuilder Pro Use of Hard-coded Credentials

State: Published
Severity: 9.8 Critical
Published: Nov 6, 2023
Updated: Jan 16, 2025
Reserved: Oct 25, 2023

Description

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	icscert

Weaknesses

CWE-798 Use of Hard-coded Credentials

Affected Products

Product	Versions
EasyBuilder ProWeintek	before v6.07.02Affected 6.08.01.592 and earlierAffected 6.08.02.470 and earlierAffected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-05

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.