CVE-2023-5777

Published: Nov 6, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server.

Affected (3)

Products: Weintek: Easybuilder Pro

1 product

Easybuilder Pro

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Weintek Easybuilder Pro	Before 6.07.02
Weintek Easybuilder Pro	From 6.08.01.190 to 6.08.01.614
Weintek Easybuilder Pro	From 6.08.02 to 6.08.02.500

Related CWEs

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-05

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-05

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.