PatchTheCVECVE-2022-47557: Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device
CVE-2022-47557 is a medium-severity flaw (CVSS 6.1) affecting ekorrci firmware, ekorccp firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious actions.
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 6.1 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.1% (top 98%) |
| CISA exploited list | No |
| Weakness | CWE-916 |
| Published | 2023-09-19 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-47557?
ekorrci firmware: mitigate or apply the listed mitigation; ekorccp firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2022-47557 being exploited?
CVE-2022-47557 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-47557 affect?
CVE-2022-47557 affects ekorrci firmware, ekorccp firmware. Severity is medium (CVSS 6.1). Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious actions
How urgent is CVE-2022-47557?
Priority 22/100. No elevated risk signals yet.
Related CVEs
- CVE-2022-47562 HIGH 7.5 MITIGATE MITIGATE Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial
- CVE-2022-47561 HIGH 7.3 MITIGATE MITIGATE The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without lo
- CVE-2022-47560 MEDIUM 5.7 MITIGATE MITIGATE The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom re
- CVE-2022-47559 HIGH 8.6 MITIGATE MITIGATE Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised req
- CVE-2022-47558 CRITICAL 9.4 MITIGATE MITIGATE Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials