CVE-2022-47560 — Cleartext Transmission of Sensitive Information in Ormazabal products

CVE-2022-47560

Cleartext Transmission of Sensitive Information in Ormazabal products PUBLISHED

Description (CNA)

The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in.

Affected (CNA)

Vendor / product	Versions
Ormazabal / ekorCCP	affected 601j
Ormazabal / ekorRCI	affected 601j

CWE

CWE-319

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products

ADP enrichment

CVE

No English description supplied.

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products

CISA-ADP

No English description supplied.

No references supplied.