CVE-2022-47557 is a medium-severity vulnerability affecting Ormazabal ekorCCP and ekorRCI products, allowing an attacker on the local network to decrypt privileged user credentials. This flaw (CWE-916) could lead to unauthorized system access and malicious actions, with a CVSS score of 6.1. While the attack complexity is low and user interaction is not required, the vulnerability is not currently listed in CISA's KEV catalog, nor is there any evidence of active exploitation or public exploit code. Community discussion and media coverage are minimal, suggesting low public awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
601jCPE matchmatch criteria | cpe:2.3:o:ormazabal:ekorrci_firmware:601j:*:*:*:*:*:*:* | ||
601jCPE matchmatch criteria | cpe:2.3:o:ormazabal:ekorccp_firmware:601j:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.