Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p4xg-8hf3-jqxq

Опубликовано: 06 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server.

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server.

EPSS

Процентиль: 34%
0.00132
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server.

EPSS

Процентиль: 34%
0.00132
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798