PatchTheCVEekorrci firmware vulnerabilities and fixes
Recent CVEs affecting ekorrci firmware, with upgrade or downgrade steps. 10 tracked.
Also searched as: ekorrcifirmware.
ekorrci firmware has 10 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-09-20. Highest priority: CVE-2022-47555 (score 54/100).
- CVE-2022-47562 HIGH 7.5 MITIGATE MITIGATE Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial
- CVE-2022-47561 HIGH 7.3 MITIGATE MITIGATE The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without lo
- CVE-2022-47560 MEDIUM 5.7 MITIGATE MITIGATE The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom re
- CVE-2022-47559 HIGH 8.6 MITIGATE MITIGATE Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised req
- CVE-2022-47558 CRITICAL 9.4 MITIGATE MITIGATE Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials
- CVE-2022-47557 MEDIUM 6.1 MITIGATE MITIGATE Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device
- CVE-2022-47556 MEDIUM 6.5 MITIGATE MITIGATE Uncontrolled resource consumption in ekorRCI, allowing an attacker with low-privileged access to the web serve
- CVE-2022-47555 CRITICAL 9.3 MITIGATE MITIGATE Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to exec
- CVE-2022-47554 HIGH 8.2 MITIGATE MITIGATE Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain cri
- CVE-2022-47553 HIGH 8.6 MITIGATE MITIGATE Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with s
FAQ
How do I fix ekorrci firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ekorrci firmware being exploited right now?
None of the tracked ekorrci firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ekorrci firmware CVE should I patch first?
CVE-2022-47555 currently ranks highest (54/100): Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to exec.