PT-2025-42882 · Unknown · Workexaminer Professional

Publicado 2025-10-21 · Atualizado 2025-10-26 · CVE-2025-10641

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions WorkExaminer Professional (affected versions not specified)

Description Communication within WorkExaminer Professional lacks encryption, exposing sensitive data transmitted between monitoring clients, the console, and the server to potential interception and modification by network attackers. Monitoring clients utilize unencrypted FTP to send data to the server on port 12304. Furthermore, traffic between the console client and the server on port 12306 is also unencrypted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2025-10641

Produtos afetados

Workexaminer Professional

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-10641 · Nota de Segurança
• https://t.me/CVEtracker/35392 · Publicação no Telegram
• http://seclists.org/fulldisclosure/2025/Oct/19 · Nota
• https://r.sec-consult.com/workexaminer · Nota
• https://twitter.com/cracbot/status/1982401881898143780 · Publicação no Twitter