Vulnerability Details CVE-2022-47554
Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain critical information from various .xml files, including .xml files containing credentials, without being authenticated within the web server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.8%
CVSS Severity
CVSS v3 Score 8.2
References
Products affected by CVE-2022-47554
-
cpe:2.3:h:ormazabal:ekorccp:-
-
cpe:2.3:h:ormazabal:ekorrci:-
-
cpe:2.3:o:ormazabal:ekorccp_firmware:601j
-
cpe:2.3:o:ormazabal:ekorrci_firmware:601j