PT-2023-15400 · Ekorrci+1 · Ekorrci+1

Jacinto Moral Matellán · Publicado 2023-09-19 · Atualizado 2024-08-03 · CVE-2022-47558

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ekorCCP (affected versions not specified) ekorRCI (affected versions not specified)

Description The issue arises due to access to the FTP service using default credentials. This can allow an attacker to modify critical files, potentially leading to the creation of new users, deletion or modification of existing users, modification of configuration files, or the installation of rootkits or backdoors.

Recommendations For ekorCCP, consider disabling access to the FTP service until a secure configuration or update is available. For ekorRCI, restrict the use of default credentials for the FTP service to minimize the risk of exploitation. As a temporary workaround, avoid using the FTP service with default credentials until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-284

CWE-798

Identificadores relacionados

CVE-2022-47558

Produtos afetados

Ekorccp

Ekorrci

Referências · 7

• https://osv.dev/vulnerability/CVE-2022-47558 · Aviso do Fabricante
• https://t.me/cvenotify/58439 · Publicação no Telegram
• https://twitter.com/cracbot/status/1704374885576069501 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1704122937501012121 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2022-47558 · Nota de Segurança
• https://t.me/cibsecurity/70716 · Publicação no Telegram
• https://incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products · Nota