CVE-2022-47553

Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive information for the organisation, without being authenticated within the web server.

Score

CVSS 3.1 8.6 High

Status

Modified - cve-coordination@incibe.es

Published

2023-09-19

Last modified

2024-08-29

Weaknesses

CWE-285, CWE-863

Affected products

• Ekorccp (Ormazabal)
• Ekorccp Firmware (Ormazabal)
• Ekorrci (Ormazabal)
• Ekorrci Firmware (Ormazabal)

References

• https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products