CVE Feed

    Dashboard / CVE / CVE-2022-47557

    CVE-2022-47557

    Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious actions.

    Published:Sep 19, 2023
    Last Modified:Nov 21, 2024
    EPS:Sep 19, 2023
    EPSS Score:0.00035
    CVSS Score:6.1

    Affected Products

    Vendor
    Ormazabal
    Product
    Ekorccp
    Vendor
    Ormazabal
    Product
    Ekorccp Firmware
    Vendor
    Ormazabal
    Product
    Ekorrci
    Vendor
    Ormazabal
    Product
    Ekorrci Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-55 Rainbow Table Password Cracking

    Related CVEs

    CVE-2022-47562 (CVSS 7.5) — Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial …
    CVE-2022-47561 (CVSS 7.3) — The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without lo…
    CVE-2022-47560 (CVSS 5.7) — The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom re…
    CVE-2022-47559 (CVSS 8.6) — Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised req…
    CVE-2022-47558 (CVSS 9.4) — Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials. Exploit…
    CVE-2022-47556 (CVSS 6.5) — Uncontrolled resource consumption in ekorRCI, allowing an attacker with low-privileged access to the web serve…
    CVE-2022-47555 (CVSS 9.3) — Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to exec…
    CVE-2022-47554 (CVSS 8.2) — Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain cri…
    CVE-2022-47553 (CVSS 8.6) — Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with s…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High