CVE Feed

    Dashboard / CVE / CVE-2022-47559

    CVE-2022-47559

    Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity.

    Published:Sep 19, 2023
    Last Modified:Nov 21, 2024
    EPS:Sep 19, 2023
    EPSS Score:0.00112
    CVSS Score:8.6

    Affected Products

    Vendor
    Ormazabal
    Product
    Ekorccp
    Vendor
    Ormazabal
    Product
    Ekorccp Firmware
    Vendor
    Ormazabal
    Product
    Ekorrci
    Vendor
    Ormazabal
    Product
    Ekorrci Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-47562 (CVSS 7.5) — Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial …
    CVE-2022-47561 (CVSS 7.3) — The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without lo…
    CVE-2022-47560 (CVSS 5.7) — The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom re…
    CVE-2022-47558 (CVSS 9.4) — Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials. Exploit…
    CVE-2022-47557 (CVSS 6.1) — Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device …
    CVE-2022-47556 (CVSS 6.5) — Uncontrolled resource consumption in ekorRCI, allowing an attacker with low-privileged access to the web serve…
    CVE-2022-47555 (CVSS 9.3) — Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to exec…
    CVE-2022-47554 (CVSS 8.2) — Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain cri…
    CVE-2022-47553 (CVSS 8.6) — Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with s…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High