The WorkExaminer Professional server includes an FTP server on TCP port 12304 that uses weak hardcoded credentials. An attacker with network access to this port can authenticate to the FTP server, read or modify data and log files, and achieve remote code execution with SYSTEM privileges by replacing service binaries in the installation directory.