Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2022-47560

Cleartext Transmission of Sensitive Information in Ormazabal products

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ormazabal ekorCCP

Default version status: unaffected

  • 601jaffected

Ormazabal ekorRCI

Default version status: unaffected

  • 601jaffected

References