CVE Feed

    Dashboard / CVE / CVE-2022-47558

    CVE-2022-47558

    Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials. Exploitation of this vulnerability can allow an attacker to modify critical files that could allow the creation of new users, delete or modify existing users, modify configuration files, install rootkits or backdoors.

    Published:Sep 19, 2023
    Last Modified:Nov 21, 2024
    EPS:Sep 19, 2023
    EPSS Score:0.00122
    CVSS Score:9.4

    Affected Products

    Vendor
    Ormazabal
    Product
    Ekorccp
    Vendor
    Ormazabal
    Product
    Ekorccp Firmware
    Vendor
    Ormazabal
    Product
    Ekorrci
    Vendor
    Ormazabal
    Product
    Ekorrci Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-47562 (CVSS 7.5) — Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial …
    CVE-2022-47561 (CVSS 7.3) — The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without lo…
    CVE-2022-47560 (CVSS 5.7) — The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom re…
    CVE-2022-47559 (CVSS 8.6) — Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised req…
    CVE-2022-47557 (CVSS 6.1) — Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device …
    CVE-2022-47556 (CVSS 6.5) — Uncontrolled resource consumption in ekorRCI, allowing an attacker with low-privileged access to the web serve…
    CVE-2022-47555 (CVSS 9.3) — Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to exec…
    CVE-2022-47554 (CVSS 8.2) — Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain cri…
    CVE-2022-47553 (CVSS 8.6) — Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with s…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High