Weintek Easybuilder Pro vulnerabilities

2 CVEs affecting Weintek Easybuilder Pro, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5777, published 2023-11-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-0104, published 2023-02-22. High severity, CVSS 7.8. EPSS: 21.8% chance of exploitation in the next 30 days. The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer…
CVE-2023-5777, published 2023-11-06. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public,…