CVE-2025-10639: falha de alta gravidade em EfficientLab WorkExaminer Professional
Usage of Hardcoded FTP Credentials EfficientLab WorkExaminer Professional
Publicada em · Atualizada em
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.9%
probabilidade de exploração
0.9%top 41% das CVEs
exploração observada
nãonenhuma fonte reporta
The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304. An attacker with network access to this port can use weak hardcoded credentials to login to the FTP server and modify or read data, log files and gain remote code execution as NT Authority\SYSTEM on the server by exchanging accessible service binaries in the WorkExaminer installation directory (e.g. "C:\Program File (x86)\Work Examiner Professional Server").
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
EfficientLab · WorkExaminer ProfessionalCVEs relacionadas — EfficientLab WorkExaminer Professional
No mesmo produto, das mais perigosas para as menos.