EfficientLab vulnerabilities
We track 3 vulnerabilities in EfficientLab products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2025.
Latest EfficientLab vulnerabilities
- 7.1 High severity
WorkExaminer Professional: Cleartext Transmission of Sensitive Information
All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire
- 9.8 Critical severity
WorkExaminer Professional: Client-Side Enforcement of Server-Side Security
An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain administrative access to the WorkExaminer ser
- 8.8 High severity
WorkExaminer Professional: Use of Hard-coded Credentials
The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304. An attacker with network access to this port can use weak hardcoded credentials to login to the FTP server and modify or read