CVE-2023-0104

CVSS V2 None CVSS V3 None
Description
The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data.
Overview
  • CVE ID
  • CVE-2023-0104
  • Assigner
  • ics-cert@hq.dhs.gov
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-02-22T21:15:11
  • Last Modified Date
  • 2023-03-03T04:06:16
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:weintek:easybuilder_pro:*:*:*:*:*:*:*:* 1 OR 6.07.02.480
cpe:2.3:a:weintek:easybuilder_pro:*:*:*:*:*:*:*:* 1 OR 6.08.01.190 6.08.01.350
References
Reference URL Reference Tags
https://www.cisa.gov/uscert/ics/advisories/icsa-23-045-01 Third Party Advisory US Government Resource
History
Created Old Value New Value Data Type Notes
2023-04-17 05:18:07 Added to TrackCVE
2023-04-17 05:18:10 Weakness Enumeration new