Ormazabal EkorRCI
Approved changes feed: RSS · Atom
cpe:2.3:h:ormazabal:ekorrci:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Ormazabal (062c8e62-ccfb-5250-838b-ebfe91c9ab8f) |
|---|---|
| Product | Ekorrci (4573bf46-d234-54e3-b890-186e3f7231c0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-47562 |
not_vulnerable | 2026-06-08 05:50:40.753534 |
Allocation of Resources Without Limits or Throttling in Ormazabal products
HIGH (7.5)
Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial of service (DoS) condition.
Published: 2023-09-20T07:56:29.612Z
Updated: 2024-09-24T19:14:56.262Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47562 |
vulnerable | 2026-06-08 05:50:40.753054 |
Allocation of Resources Without Limits or Throttling in Ormazabal products
HIGH (7.5)
Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial of service (DoS) condition.
Published: 2023-09-20T07:56:29.612Z
Updated: 2024-09-24T19:14:56.262Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47561 |
not_vulnerable | 2026-06-08 05:50:40.752512 |
Unprotected Storage of Credentials in Ormazabal products
HIGH (7.3)
The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to subsequently execute malicious actions.
Published: 2023-09-20T07:54:53.890Z
Updated: 2024-09-24T18:06:23.610Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47560 |
not_vulnerable | 2026-06-08 05:50:40.751880 |
Cleartext Transmission of Sensitive Information in Ormazabal products
MEDIUM (5.7)
The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in.
Published: 2023-09-20T07:52:33.173Z
Updated: 2025-06-18T14:27:40.985Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47559 |
not_vulnerable | 2026-06-08 05:50:40.751181 |
Cross-Site Request Forgery in Ormazabal products
HIGH (8.6)
Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity.
Published: 2023-09-19T13:00:59.770Z
Updated: 2024-08-03T14:55:08.191Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47558 |
not_vulnerable | 2026-06-08 05:50:40.750361 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47558 |
vulnerable | 2026-06-08 05:50:40.750112 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47557 |
not_vulnerable | 2026-06-08 05:50:40.749383 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47556 |
not_vulnerable | 2026-06-08 05:50:40.748717 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47556 |
vulnerable | 2026-06-08 05:50:40.748636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47555 |
not_vulnerable | 2026-06-08 05:50:40.748102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47555 |
vulnerable | 2026-06-08 05:50:40.747717 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47554 |
not_vulnerable | 2026-06-08 05:50:40.747249 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47553 |
not_vulnerable | 2026-06-08 05:50:40.745870 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.