Skip to content
OpenAdvisories

Vendor

Ormazabal

10 known vulnerabilities.

Products

ekorRCI 10 ekorCCP 9
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2022-47558

    Improper Access Control in Ormazabal products

    Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials. Exploitation of this vulnerability can allow an attacker to modify critical files that could allow the creation of new users, delete or modify existing user…

    Ormazabal ekorRCI ekorCCP
  • Critical 9.3
    CVE-2022-47555

    Improper Neutralization of Special Elements in Ormazabal products

    Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to execute commands, create new users with elevated privileges or set up a backdoor.

    Ormazabal ekorRCI ekorCCP