Missing Server-Side Authentication Checks in EfficientLab WorkExaminer Professional_CVE-2025-10640

{
    "lastseen": "",
    "description": "An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain administrative access to the WorkExaminer server and therefore all sensitive monitoring data. This includes monitored screenshots and keystrokes of all users.\n\nThe WorkExaminer Professional console is used for administrative access to the server. Before access to the console is granted administrators must login. Internally, a custom protocol is used to call a respective stored procedure on the MSSQL database. The return value of the call is not validated on the server-side. Instead it is only validated client-side which allows to bypass authentication.",
    "published": "2025-10-21T11:43:44.598Z",
    "modified": "2025-10-22T18:59:33.134Z",
    "type": "cve",
    "title": "Missing Server-Side Authentication Checks in EfficientLab WorkExaminer Professional",
    "source": "SEC-VLab",
    "references": "https://r.sec-consult.com/workexaminer",
    "id": "CVE-2025-10640",
    "bulletinFamily": "",
    "cwe": [
        "CWE-602"
    ],
    "cvelist": null,
    "sourceData": "EfficientLab WorkExaminer Professional <= 4.0.0.52001",
    "sourceHref": "",
    "cvss": {
        "score": 9.8,
        "severity": "CRITICAL",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "WorkExaminer Professional",
    "version": "<= 4.0.0.52001",
    "vendor": "EfficientLab",
    "ai_description": "Unauthenticated attackers can bypass login prompts and gain administrative access to sensitive monitoring data due to missing server-side authentication checks in the WorkExaminer Professional console.",
    "ai_severity": "Critical",
    "ai_vendor": "EfficientLab",
    "ai_product": "WorkExaminer Professional",
    "ai_version": "<= 4.0.0.52001",
    "ai_score": 9.8
}