Lucene search

INCDCVE-2022-30626

HistoryJul 18, 2022 - 1:15 p.m.

CVE-2022-30626

2022-07-1813:15:10

CWE-312

INCD

web.nvd.nist.gov

cve-2022

ip security

clear text password

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

51.4%

JSON

Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show in the name of the existing access point on the component, and a password in clear text.

Affected configurations

Nvd

Node

chcnavp5e_gnss_firmwareMatch4.1

chcnavp5e_gnss_firmwareMatch4.2

AND

chcnavp5e_gnssMatch-

VendorProductVersionCPE
chcnavp5e_gnss_firmware4.1cpe:2.3:o:chcnav:p5e_gnss_firmware:4.1:*:*:*:*:*:*:*
chcnavp5e_gnss_firmware4.2cpe:2.3:o:chcnav:p5e_gnss_firmware:4.2:*:*:*:*:*:*:*
chcnavp5e_gnss-cpe:2.3:h:chcnav:p5e_gnss:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
chcnav	p5e_gnss_firmware	4.1	cpe:2.3:o:chcnav:p5e_gnss_firmware:4.1:::::::*
chcnav	p5e_gnss_firmware	4.2	cpe:2.3:o:chcnav:p5e_gnss_firmware:4.2:::::::*
chcnav	p5e_gnss	-	cpe:2.3:h:chcnav:p5e_gnss:-:::::::*

CNA Affected

[
  {
    "product": "Chcnav - P5E GNSS",
    "vendor": "Chcnav",
    "versions": [
      {
        "lessThan": "4.1*",
        "status": "affected",
        "version": "4.2",
        "versionType": "custom"
      }
    ]
  }
]

References

www.gov.il/en/Departments/faq/cve_advisories

Social References

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

51.4%

JSON

Related for CVE-2022-30626