Ormazabal EkorRCI Firmware 601j

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:ormazabal:ekorrci_firmware:601j:*:*:*:*:*:*:*

part: o version: 601j update: *

VendorOrmazabal (062c8e62-ccfb-5250-838b-ebfe91c9ab8f)
ProductEkorrci Firmware (cb10f8e8-8254-5d58-a840-c86e5e87b807)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-47562 vulnerable 2026-06-08 05:50:40.753396 Allocation of Resources Without Limits or Throttling in Ormazabal products
HIGH (7.5)
Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial of service (DoS) condition.
Published: 2023-09-20T07:56:29.612Z
Updated: 2024-09-24T19:14:56.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47561 vulnerable 2026-06-08 05:50:40.752496 Unprotected Storage of Credentials in Ormazabal products
HIGH (7.3)
The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to subsequently execute malicious actions.
Published: 2023-09-20T07:54:53.890Z
Updated: 2024-09-24T18:06:23.610Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47560 vulnerable 2026-06-08 05:50:40.751760 Cleartext Transmission of Sensitive Information in Ormazabal products
MEDIUM (5.7)
The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in.
Published: 2023-09-20T07:52:33.173Z
Updated: 2025-06-18T14:27:40.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47559 vulnerable 2026-06-08 05:50:40.751021 Cross-Site Request Forgery in Ormazabal products
HIGH (8.6)
Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity.
Published: 2023-09-19T13:00:59.770Z
Updated: 2024-08-03T14:55:08.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47558 vulnerable 2026-06-08 05:50:40.750189 Improper Access Control in Ormazabal products
CRITICAL (9.4)
Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials. Exploitation of this vulnerability can allow an attacker to modify critical files that could allow the creation of new users, delete or modify existing users, modify configuration files, install rootkits or backdoors.
Published: 2023-09-19T12:58:48.452Z
Updated: 2024-08-03T14:55:08.506Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47557 vulnerable 2026-06-08 05:50:40.749365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47556 vulnerable 2026-06-08 05:50:40.748699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47555 vulnerable 2026-06-08 05:50:40.748004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47554 vulnerable 2026-06-08 05:50:40.747228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47553 vulnerable 2026-06-08 05:50:40.742507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.