Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Chcnav - P5E GNSS 4.1* Clear all filters
TI-2022-12759 CVE-2022-30623 · GHSA-5mcf-4jxx-fhq7

Chcnav - P5E GNSS Authentication bypass

Priority MEDIUM 42

The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status and its value is set to true to bypass the identification with the system using a username and pass…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00418 Published 2022-07-18 No fix listed CWE-288
TI-2022-12761 CVE-2022-30625 · GHSA-34hf-rwhq-v47w

Chcnav - P5E GNSS Directory listing

Priority LOW 26

Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory.

CVSS 3.1MEDIUM 5.7 Local Low privileges User interaction EPSS 0.00336 Published 2022-07-18 No fix listed CWE-548
TI-2022-12762 CVE-2022-30626 · GHSA-hmg4-2338-pm28

Chcnav - P5E GNSS API not secure

Priority LOW 32

Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show in the name of the existing access point on the component, and a password in clear text.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0023 Published 2022-07-18 No fix listed CWE-312
TI-2022-12763 CVE-2022-30627 · GHSA-gpvf-rgjw-wr7j

Chcnav - P5E GNSS Information disclosure hard coded credentials.

Priority LOW 33

This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104, update_i50_v1.0.55_b20200509, update_x6_v2.1.2_b202001127, update_b5_v2.0.9_b20200706.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00306 Published 2022-07-18 No fix listed CWE-798