CVE-2022-47559: Ormazabal Ekorccp Firmware

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity.

Affected products

  • Ormazabal Ekorccp Firmware: version 601j only
  • Ormazabal Ekorrci Firmware: version 601j only

Published 2023-09-19. Last modified 2026-06-17.