CVE-2022-47555: falha crítica em Ormazabal ekorCCP
Improper Neutralization of Special Elements in Ormazabal products
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 1.1%
Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to execute commands, create new users with elevated privileges or set up a backdoor.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
CVEs relacionadas — Ormazabal ekorCCP
No mesmo produto, das mais perigosas para as menos.
CVE-2022-47562HIGHAllocation of Resources Without Limits or Throttling in Ormazabal productsEPSS 0.8%CVE-2022-47553HIGHImproper Authorization in Ormazabal productsEPSS 0.8%CVE-2022-47554HIGHExposure of Sensitive Information in Ormazabal productsEPSS 0.6%CVE-2022-47558CRITICALImproper Access Control in Ormazabal productsEPSS 0.6%CVE-2022-47556MEDIUMUncontrolled Resource Consumption in Ormazabal productsEPSS 0.6%CVE-2022-47560MEDIUMCleartext Transmission of Sensitive Information in Ormazabal productsEPSS 0.3%