title: Use of Password Hash With Insufficient Computational Effort in Ormazabal products
description: Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious actions.
problem types: CWE-916 Use of Password Hash With Insufficient Computational Effort
affected:
{
defaultStatus: unaffected
product: ekorCCP
vendor: Ormazabal
versions:
status: affected, version: 601j
}
{
defaultStatus: unaffected
product: ekorRCI
vendor: Ormazabal
versions:
status: affected, version: 601j
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Ormazabal recommends upgrading to updated models.