Ormazabal Ekorrci
10 CVEs affecting Ormazabal Ekorrci. Latest disclosed: 2023-09-20. Critical: 2, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-47558 | Critical | 9.4 | 2023-09-19 | Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials. Exploitation of this vulnerability can allow an attacker… |
CVE-2022-47555 | Critical | 9.3 | 2023-09-19 | Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to execute commands, create new users with elevated priv… |
CVE-2022-47559 | High | 8.6 | 2023-09-19 | Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is… |
CVE-2022-47553 | High | 8.6 | 2023-09-19 | Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive information for the organisation, withou… |
CVE-2022-47554 | High | 8.2 | 2023-09-19 | Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain critical information from various .xml files, includ… |
CVE-2022-47562 | High | 7.5 | 2023-09-20 | Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial of service (DoS) condition. |
CVE-2022-47561 | High | 7.3 | 2023-09-20 | The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an atta… |
CVE-2022-47556 | Medium | 6.5 | 2023-09-19 | Uncontrolled resource consumption in ekorRCI, allowing an attacker with low-privileged access to the web server to send continuous legitimate web requests to a… |
CVE-2022-47557 | Medium | 6.1 | 2023-09-19 | Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileg… |
CVE-2022-47560 | Medium | 5.7 | 2023-09-20 | The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user i… |