CVE-2022-47560CWE-319

Cleartext Transmission of Sensitive Information in Ormazabal products

Medium · published September 20, 2023

CVSS v3.1
5.7
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.9th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2023-09-20T07:52Z
EPSS history
Timeline
  • 20 SEP 07:52Z
    Cleartext Transmission of Sensitive Information in Ormazabal products
    cvelistv5