Skip to content

Product

Weintek EasyBuilder Pro vulnerabilities

2 published CVES affecting Weintek EasyBuilder Pro, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest Weintek EasyBuilder Pro CVEs

Newest publication first

  1. CVE-2023-5777 Weintek EasyBuilder Pro Use of Hard-coded Credentials

    Published
    CriticalCVSS 9.8 EPSS 0.67%

    Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server.

  2. CVE-2023-0104 The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or....

    Published
    HighCVSS 7.8 EPSS 21.8%

    The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.