Chcnav P5E GNSS admin.html password recovery

A vulnerability, which was classified as critical, has been found in Chcnav P5E GNSS (unknown version). This issue affects an unknown code block of the file admin.html. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Field07/19/2022 11:11 AM08/06/2022 01:32 PM
vendorChcnavChcnav
nameP5E GNSSP5E GNSS
fileadmin.htmladmin.html
cwe640 (password recovery)640 (password recovery)
cvss3_vuldb_avNN
cvss3_vuldb_acLL
cvss3_vuldb_prNN
cvss3_vuldb_uiNN
cvss3_vuldb_sUU
cvss3_vuldb_cLL
cvss3_vuldb_iLL
cvss3_vuldb_aLL
cvss3_vuldb_rcRR
cvss3_cna_avLL
cvss3_cna_acLL
cvss3_cna_prNN
cvss3_cna_uiNN
cvss3_cna_sCC
cvss3_cna_cLL
cvss3_cna_iLL
cvss3_cna_aLL
urlhttps://www.gov.il/en/Departments/faq/cve_advisorieshttps://www.gov.il/en/Departments/faq/cve_advisories
cveCVE-2022-30624CVE-2022-30624
cve_assigned1652306400 (05/12/2022)1652306400 (05/12/2022)
cve_cnaIsrael National Cyber DirectorateIsrael National Cyber Directorate
cve_nvd_summaryBrowsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password.Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password.
date1658181600 (07/19/2022)1658181600 (07/19/2022)
cvss2_vuldb_avNN
cvss2_vuldb_acLL
cvss2_vuldb_auNN
cvss2_vuldb_ciPP
cvss2_vuldb_iiPP
cvss2_vuldb_aiPP
cvss2_vuldb_rcURUR
cvss2_vuldb_eNDND
cvss2_vuldb_rlNDND
cvss3_vuldb_eXX
cvss3_vuldb_rlXX
cvss3_cna_basescore6.86.8
cvss2_vuldb_basescore7.57.5
cvss2_vuldb_tempscore7.17.1
cvss3_vuldb_basescore7.37.3
cvss3_vuldb_tempscore7.17.1
cvss3_meta_basescore7.17.2
cvss3_meta_tempscore7.07.1
price_0day$0-$5k$0-$5k
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prN
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cN
cvss3_nvd_iH
cvss3_nvd_aN
cvss3_nvd_basescore7.5

Want to stay up to date on a daily basis?

Enable the mail alert feature now!