CVE-2022-47557

Published Sep 19, 2023

Last updated 3 months ago

Overview

Description
Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious actions.
Source
cve-coordination@incibe.es
NVD status
Modified
CNA Tags
unsupported-when-assigned

Risk scores

CVSS 3.1

Type
Primary
Base score
6.1
Impact score
4.2
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Severity
MEDIUM

Weaknesses

nvd@nist.gov
CWE-916
cve-coordination@incibe.es
CWE-916

Social media

Hype score
Not currently trending

Configurations