CVE-2022-47557

2023-09-1913:16:20

CWE-916

[email protected]

web.nvd.nist.gov

vulnerability

ekorccp

ekorrci

network-based attacker

decrypt

privileged credentials

malicious actions

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS

Percentile

9.0%

JSON

Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious actions.

Affected configurations

Nvd

Node

ormazabalekorrci_firmwareMatch601j

AND

ormazabalekorrciMatch-

Node

ormazabalekorccp_firmwareMatch601j

AND

ormazabalekorccpMatch-

VendorProductVersionCPE
ormazabalekorrci_firmware601jcpe:2.3:o:ormazabal:ekorrci_firmware:601j:*:*:*:*:*:*:*
ormazabalekorrci-cpe:2.3:h:ormazabal:ekorrci:-:*:*:*:*:*:*:*
ormazabalekorccp_firmware601jcpe:2.3:o:ormazabal:ekorccp_firmware:601j:*:*:*:*:*:*:*
ormazabalekorccp-cpe:2.3:h:ormazabal:ekorccp:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ormazabal	ekorrci_firmware	601j	cpe:2.3:o:ormazabal:ekorrci_firmware:601j:::::::*
ormazabal	ekorrci	-	cpe:2.3:h:ormazabal:ekorrci:-:::::::*
ormazabal	ekorccp_firmware	601j	cpe:2.3:o:ormazabal:ekorccp_firmware:601j:::::::*
ormazabal	ekorccp	-	cpe:2.3:h:ormazabal:ekorccp:-:::::::*