EasyBuilder Pro vulnerabilities

2 known vulnerabilities in EasyBuilder Pro from Weintek. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  EasyBuilder Pro: Use of Hard-coded Credentials

  CVE-2023-5777Nov 6, 2023Weintek

  Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash repor

• 7.8 High severity

  EasyBuilder Pro cMT: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-0104Feb 22, 2023WeintekEPSS 21.8%

  The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data.