Description
The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Weintek | EasyBuilder Pro cMT | ≤ 6.07.01, ≤ 6.07.02.479 , ≤ 6.08.01.349 | — |
Advisories 1
- ICSA-23-045-01 Weintek EasyBuilder Pro cMT Series CISA ICS & IT advisories · Feb 20, 2023