CVE-2022-47557: medium-severity vulnerability in Ormazabal ekorCCP
Use of Password Hash With Insufficient Computational Effort in Ormazabal products
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.1epss 0.1%
Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious actions.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Related CVEs — Ormazabal ekorCCP
In the same product, most dangerous first.
CVE-2022-47555CRITICALImproper Neutralization of Special Elements in Ormazabal productsEPSS 1.1%CVE-2022-47562HIGHAllocation of Resources Without Limits or Throttling in Ormazabal productsEPSS 0.8%CVE-2022-47553HIGHImproper Authorization in Ormazabal productsEPSS 0.8%CVE-2022-47554HIGHExposure of Sensitive Information in Ormazabal productsEPSS 0.6%CVE-2022-47558CRITICALImproper Access Control in Ormazabal productsEPSS 0.6%CVE-2022-47556MEDIUMUncontrolled Resource Consumption in Ormazabal productsEPSS 0.6%