Unencrypted Data Transmission in WorkExaminer Professional by WorkExaminer

CVE-2025-10641

What is CVE-2025-10641?

The WorkExaminer Professional software transmits all data between the monitoring client, console, and server in plaintext. This vulnerability allows unauthorized actors on the same network to intercept sensitive information transmitted over unencrypted connections. Furthermore, it permits potential attackers to modify the data being sent, posing significant risks to data integrity and confidentiality. Both the unencrypted FTP traffic on port 12304 and the lack of encryption in communications on port 12306 exacerbate these risks, leaving users and their data vulnerable.

References