Impact
A buffer overflow vulnerability exists in WEINVEIW CO.,LTD EBPro version 6.10.01.510_20251022 allowing a remote attacker to execute arbitrary code via the UtilityManagerEx.exe component. This flaw is a classic buffer overflow (CWE-120) that can be leveraged for remote code execution, potentially compromising the confidentiality, integrity, and availability of the affected system.
Affected Systems
Affected vendor: WEINVEIW CO.,LTD. Victim product: EBPro, specifically version 6.10.01.510_20251022.
Risk and Exploitability
The EPSS score is reported as less than 1%, indicating a very low but nonzero probability of exploitation. The CVSS score of 9.8 indicates a critical severity. Because the flaw permits remote code execution through a buffer overflow, it carries a high theoretical risk. The likely attack vector is that an attacker would need network access to the UtilityManagerEx.exe component, but no further exploitation conditions or detailed attack vectors are documented in the supplied description. It is not listed in the CISA KEV catalog, indicating no publicly known exploits have been cataloged.
OpenCVE Enrichment