← Back

CVE-2022-47557

nvd nist
Published: Sep 19, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Exploitability: 1.8 / Impact: 4.2
Source: NVD

Description

Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious actions.

Affected (2)

Ormazabal
2 products
Ekorrci Firmware
Ekorccp Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ekorrci Firmware
Version 601j
Running on/withPlatform Versions
Ormazabal
Ekorrci
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ekorccp Firmware
Version 601j
Running on/withPlatform Versions
Ormazabal
Ekorccp
All versions

Related CWEs

CWE-916
Use of Password Hash With Insufficient Computational Effort
The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.

References (2)

Source: cve-coordination@incibe.es
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.