PatchTheCVECVE-2022-47561: The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without lo
CVE-2022-47561 is a high-severity flaw (CVSS 7.3) affecting ekorccp firmware, ekorrci firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to subsequently execute malicious actions.
Why this priority
- High severity
No fix is published yet: follow the downgrade or mitigation steps.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-47561?
ekorccp firmware: mitigate or apply the listed mitigation; ekorrci firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2022-47561 being exploited?
CVE-2022-47561 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-47561 affect?
CVE-2022-47561 affects ekorccp firmware, ekorrci firmware. Severity is high (CVSS 7.3). The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear
How urgent is CVE-2022-47561?
Priority 27/100. High severity
Related CVEs
- CVE-2022-47562 HIGH 7.5 MITIGATE MITIGATE Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial
- CVE-2022-47560 MEDIUM 5.7 MITIGATE MITIGATE The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom re
- CVE-2022-47559 HIGH 8.6 MITIGATE MITIGATE Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised req
- CVE-2022-47558 CRITICAL 9.4 MITIGATE MITIGATE Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials
- CVE-2022-47557 MEDIUM 6.1 MITIGATE MITIGATE Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device