CVE-2023-5777

CRITICAL

Weintek EasyBuilder Pro < 6.07.02 - Unauthenticated Private Key Exposure

Title source: llm
STIX 2.1

Description

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-05

Scores

CVSS v3 9.8
EPSS 0.0054
EPSS Percentile 40.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-798
Status published
Products (1)
weintek/easybuilder_pro < 6.07.02
Published Nov 06, 2023
Tracked Since Feb 18, 2026