CVE-2025-10641 Unencrypted cleartext communication in EfficientLab WorkExaminer Professional

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...

CVE-2025-10640

The WorkExaminer Professional employee monitoring software is vulnerable to an authentication bypass due to missing server-side authentication checks . An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can circumvent the login prompt of the professional console....

CVE-2025-10639

The WorkExaminer Professional server installation contains a vulnerability where the included FTP server listens on TCP port 12304 using weak hardcoded credentials . An attacker with network access to this port can authenticate to the FTP server to read or modify data and log files. Furthermore, ...

CVE-2025-10640: Client-Side Enforcement of Server-Side Security

An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain administrative access to the WorkExaminer server and therefore all sensitive...

CVE-2025-10639: Use of Hard-coded Credentials

The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304. An attacker with network access to this port can use weak hardcoded credentials to login to the FTP server and modify or read data, log files and gain remote code...

PT-2025-42879

Name of the Vulnerable Software and Affected Versions WorkExaminer Professional affected versions not specified Description The WorkExaminer Professional server installation includes an FTP server listening on TCP port 12304 to receive client logs. An attacker with network access to this port can...

PT-2025-42882

Name of the Vulnerable Software and Affected Versions WorkExaminer Professional affected versions not specified Description Communication within WorkExaminer Professional lacks encryption, exposing sensitive data transmitted between monitoring clients, the console, and the server to potential...

CVE-2025-10641: Cleartext Transmission of Sensitive Information

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...