Read the docs

Chcnav

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Chcnav records in CISA KEV

No Chcnav vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
P5e Gnss Firmware 6 records MEDIUM

Records

6 records

TI-2022-12759 CVE-2022-30623 · GHSA-5mcf-4jxx-fhq7

Chcnav - P5E GNSS Authentication bypass

Priority MEDIUM 42

The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status and its value is set to true to bypass the identification with the system using a username and pass…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00418 Published 2022-07-18 No fix listed CWE-288
TI-2022-12763 CVE-2022-30627 · GHSA-gpvf-rgjw-wr7j

Chcnav - P5E GNSS Information disclosure hard coded credentials.

Priority LOW 33

This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104, update_i50_v1.0.55_b20200509, update_x6_v2.1.2_b202001127, update_b5_v2.0.9_b20200706.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00306 Published 2022-07-18 No fix listed CWE-798
TI-2022-12762 CVE-2022-30626 · GHSA-hmg4-2338-pm28

Chcnav - P5E GNSS API not secure

Priority LOW 32

Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show in the name of the existing access point on the component, and a password in clear text.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0023 Published 2022-07-18 No fix listed CWE-312
TI-2022-12758 CVE-2022-30622 · GHSA-mjhj-9f4w-v2vv

Chcnav - P5E GNSS Information disclosure

Priority LOW 31

Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00179 Published 2022-07-17 No fix listed CWE-798
TI-2022-12761 CVE-2022-30625 · GHSA-34hf-rwhq-v47w

Chcnav - P5E GNSS Directory listing

Priority LOW 26

Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory.

CVSS 3.1MEDIUM 5.7 Local Low privileges User interaction EPSS 0.00336 Published 2022-07-18 No fix listed CWE-548
Open these records in search →