Vulnerability Details CVE-2022-47559
Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.6%
CVSS Severity
CVSS v3 Score 8.6
References
Products affected by CVE-2022-47559
-
cpe:2.3:h:ormazabal:ekorccp:-
-
cpe:2.3:h:ormazabal:ekorrci:-
-
cpe:2.3:o:ormazabal:ekorccp_firmware:601j
-
cpe:2.3:o:ormazabal:ekorrci_firmware:601j