PT-2025-42880 · Microsoft+1 · Mssql+1

Published 2025-10-21 · Updated 2025-10-26 · CVE-2025-10640

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WorkExaminer versions (affected versions not specified)

Description An unauthenticated attacker gaining access to TCP port 12306 of the WorkExaminer server can bypass the login prompt due to missing server-side authentication checks. This allows administrative access to the WorkExaminer server and all sensitive monitoring data, including monitored screenshots and keystrokes of all users. The WorkExaminer Professional console, used for administrative access, utilizes a custom protocol to call a stored procedure on the MSSQL database. The server does not validate the return value of this call, relying instead on client-side validation, which can be circumvented.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-602

Related Identifiers

CVE-2025-10640

Affected Products

Mssql

Workexaminer

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-10640 · Security Note
• https://twitter.com/CVEnew/status/1980602705644048764 · Twitter Post
• http://seclists.org/fulldisclosure/2025/Oct/19 · Note
• https://t.me/CVEtracker/35391 · Telegram Post
• https://r.sec-consult.com/workexaminer · Note
• https://twitter.com/cracbot/status/1982401879951987068 · Twitter Post