CVE-2022-47561 Unprotected Storage of Credentials in Ormazabal products
Attackers can read clear-text credentials from an unprotected XML file to gain unauthorized access to user and admin accounts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-47561?
CVE-2022-47561 is a high-severity vulnerability in Ormazabal ekorCCP, published on 20 Sep 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to subsequently execute malicious actions.
Which versions are affected by CVE-2022-47561?
It affects 2 products.
Products include Ormazabal Ekorccp Firmware, Ormazabal Ekorrci Firmware.
How do I fix CVE-2022-47561?
No fix has been published for CVE-2022-47561 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-47561 being exploited?
There is no known exploitation of CVE-2022-47561 in the wild and no public exploit code.
Other vulnerabilities in Ormazabal ekorCCP
- CVE-2022-47558 Improper Access Control in Ormazabal products
- CVE-2022-47555 Improper Neutralization of Special Elements in Ormazabal products
- CVE-2022-47553 Improper Authorization in Ormazabal products
- CVE-2022-47559 Cross-Site Request Forgery in Ormazabal products
- CVE-2022-47554 Exposure of Sensitive Information in Ormazabal products
Sources
Also known as GHSA-x784-rw8j-q6w6.