PT-2023-15400 · Ekorrci+1 · Ekorrci+1

Jacinto Moral Matellán · Published 2023-09-19 · Updated 2024-08-03 · CVE-2022-47558

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ekorCCP (affected versions not specified) ekorRCI (affected versions not specified)

Description The issue arises due to access to the FTP service using default credentials. This can allow an attacker to modify critical files, potentially leading to the creation of new users, deletion or modification of existing users, modification of configuration files, or the installation of rootkits or backdoors.

Recommendations For ekorCCP, consider disabling access to the FTP service until a secure configuration or update is available. For ekorRCI, restrict the use of default credentials for the FTP service to minimize the risk of exploitation. As a temporary workaround, avoid using the FTP service with default credentials until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Using Hardcoded Credentials

Weakness Enumeration

CWE-284

CWE-798

Related Identifiers

CVE-2022-47558

Affected Products

Ekorccp

Ekorrci

References · 7

• https://osv.dev/vulnerability/CVE-2022-47558 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47558 · Security Note
• https://t.me/cvenotify/58439 · Telegram Post
• https://twitter.com/cracbot/status/1704374885576069501 · Twitter Post
• https://twitter.com/CVEnew/status/1704122937501012121 · Twitter Post
• https://t.me/cibsecurity/70716 · Telegram Post
• https://incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products · Note