Lucene search

K
vulnrichmentINCIBEVULNRICHMENT:CVE-2022-47562
HistorySep 20, 2023 - 7:56 a.m.

CVE-2022-47562 Allocation of Resources Without Limits or Throttling in Ormazabal products

2023-09-2007:56:29
CWE-770
INCIBE
github.com
cve-2022-47562
allocation of resources
ormazabal products
rcpbind service
udp port 111
remote attacker
denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

52.5%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial of service (DoS) condition.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:ormazabal:ekorccp:-:*:*:*:*:*:*:*"
    ],
    "vendor": "ormazabal",
    "product": "ekorccp",
    "versions": [
      {
        "status": "affected",
        "version": "601j"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:ormazabal:ekorrci:-:*:*:*:*:*:*:*"
    ],
    "vendor": "ormazabal",
    "product": "ekorrci",
    "versions": [
      {
        "status": "affected",
        "version": "601j"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

52.5%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

Related for VULNRICHMENT:CVE-2022-47562