CVE-2022-47559 Cross-Site Request Forgery in Ormazabal products

Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity...

CVE-2022-47557 Use of Password Hash With Insufficient Computational Effort in Ormazabal products

Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious actions...

CVE-2022-47557

CVE-2022-47557 affects Ormazabal ekorCCP and ekorRCI. A vulnerability could allow an attacker with local network access to decrypt privileged-user credentials and subsequently gain access to the system to perform malicious actions. The provided sources describe the impact (credential decryption a...

CVE-2022-47557 Use of Password Hash With Insufficient Computational Effort in Ormazabal products

Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious actions...

CVE-2022-47555 Improper Neutralization of Special Elements in Ormazabal products

Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to execute commands, create new users with elevated privileges or set up a backdoor...

CVE-2022-47555

CVE-2022-47555 affects Ormazabal ekorCCP and ekorRCI and is described as an operating system command injection. Multiple sources confirm an authenticated attacker could execute commands, create users with elevated privileges, or backdoor the system. The NVD metrics show a high/critical impact (CV...

CVE-2022-47554

CVE-2022-47554 targets Ormazabal ekorCCP and ekorRCI, exposing sensitive information from various .xml files (including credentials) without authentication. Affected software: ekorCCP/ekorRCI (Ormazabal product family). Root cause: exposure of protected data via unsecured access to XML files on t...

CVE-2022-47553 Improper Authorization in Ormazabal products

Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive information for the organisation, without being authenticated within the web server...

PT-2023-15396 · Ekorccp +1 · Ekorccp +1

Name of the Vulnerable Software and Affected Versions: ekorCCP and ekorRCI affected versions not specified Description: The issue allows a remote attacker to obtain critical information from various .xml files, including .xml files containing credentials, without being authenticated within the we...

PT-2023-15395 · Ekorccp +1 · Ekorccp +1

Name of the Vulnerable Software and Affected Versions: ekorCCP and ekorRCI affected versions not specified Description: The issue concerns incorrect authorization in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive information for the organization withou...

PT-2023-15397 · Ekorccp +1 · Ekorccp +1

Name of the Vulnerable Software and Affected Versions: ekorCCP and ekorRCI affected versions not specified Description: The issue is an operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to execute commands, create new users with elevated...

PT-2023-15399 · Ekorccp +1 · Ekorccp +1

Name of the Vulnerable Software and Affected Versions: ekorCCP and ekorRCI affected versions not specified Description: The issue allows an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to...

Ormazabal ekorCCP 和 ekorRCI 安全漏洞

Ormazabal is a family of power system management products. A security vulnerability exists in Ormazabal ekorCCP and ekorRCI. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor announcement...

Ormazabal ekorCCP 和 ekorRCI 信任管理问题漏洞

Ormazabal is a family of power system management products. A security vulnerability exists in Ormazabal ekorCCP and ekorRCI, no information is available at this time, please stay tuned to CNNVD or the vendor announcement...

Ormazabal ekorCCP 和 ekorRCI 安全漏洞

Ormazabal is a family of power system management products. A security vulnerability exists in Ormazabal ekorCCP and ekorRCI. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor announcement...