GCVE - cpe:2.3:o:chcnav:p5e_gnss_firmware:4.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:chcnav:p5e_gnss_firmware:4.2:*:*:*:*:*:*:*

part: o version: 4.2 update: *

Vendor	Chcnav (`69be5cc0-d2e4-595d-8223-6d076568c85b`)
Product	P5E Gnss Firmware (`a2750ec5-a326-5641-ad79-34f383ee4ea2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-30627`	vulnerable	2026-06-08 05:43:38.696797	Chcnav - P5E GNSS Information disclosure hard coded credentials. MEDIUM (5.7) This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104, update_i50_v1.0.55_b20200509, update_x6_v2.1.2_b202001127, update_b5_v2.0.9_b20200706. This vulnerability makes it possible to extract from the FW the existing user passwords on their operating systems and passwords. Published: 2022-07-18T12:57:00.569Z Updated: 2024-09-17T00:57:04.145Z Open on db.gcve.eu Reference links https://www.gov.il/en/Departments/faq/cve_advisories	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30626`	vulnerable	2026-06-08 05:43:38.696402	Chcnav - P5E GNSS API not secure MEDIUM (6.3) Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show in the name of the existing access point on the component, and a password in clear text. Published: 2022-07-18T12:58:11.506Z Updated: 2024-09-17T01:26:16.593Z Open on db.gcve.eu Reference links https://www.gov.il/en/Departments/faq/cve_advisories	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30625`	vulnerable	2026-06-08 05:43:38.695920	Chcnav - P5E GNSS Directory listing MEDIUM (5.7) Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. A directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences vary depending on which files are listed and accessible. Published: 2022-07-18T12:58:39.399Z Updated: 2024-09-17T03:47:36.623Z Open on db.gcve.eu Reference links https://www.gov.il/en/Departments/faq/cve_advisories	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30624`	vulnerable	2026-06-08 05:43:38.695430	Chcnav - P5E GNSS Authentication bypass admin password reset MEDIUM (6.8) Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password. Published: 2022-07-18T12:57:47.673Z Updated: 2024-09-17T00:25:40.854Z Open on db.gcve.eu Reference links https://www.gov.il/en/Departments/faq/cve_advisories	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30623`	vulnerable	2026-06-08 05:43:38.694760	Chcnav - P5E GNSS Authentication bypass MEDIUM (5.9) The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status and its value is set to true to bypass the identification with the system using a username and password. Published: 2022-07-18T12:59:03.084Z Updated: 2024-09-17T00:16:12.641Z Open on db.gcve.eu Reference links https://www.gov.il/en/Departments/faq/cve_advisories	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30622`	vulnerable	2026-06-08 05:43:38.692325	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.