Lucene search
HistorySep 19, 2023 - 2:15 p.m.
CVE-2022-47559
device control
ekorccp
ekorrci
attacker
malicious actions
web requests
availability
privacy
integrity
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
24.1%
Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity.
Affected configurations
Node
ormazabalekorrci_firmwareMatch601j
ormazabalekorrciMatch-
Node
ormazabalekorccp_firmwareMatch601j
ormazabalekorccpMatch-
Related
prion
prion
Code injection
2023-09-19 14:15:00
cve
cve
CVE-2022-47559
2023-09-19 14:15:15
cvelist
cvelist
CVE-2022-47559 Cross-Site Request Forgery in Ormazabal products
2023-09-19 13:00:59
vulnrichment
vulnrichment
CVE-2022-47559 Cross-Site Request Forgery in Ormazabal products
2023-09-19 13:00:59
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
24.1%
Related for NVD:CVE-2022-47559