CVE-2022-30627 MEDIUM

CVE-2022-30627: Chcnav - P5E GNSS Information disclosure hard coded credentials.

Vendor Chcnav
Product Chcnav - P5E GNSS
Published July 18, 2022
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

5.7/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104, update_i50_v1.0.55_b20200509, update_x6_v2.1.2_b202001127, update_b5_v2.0.9_b20200706. This vulnerability makes it possible to extract from the FW the existing user passwords on their operating systems and passwords.

Key dates

02Disclosure timeline

July 18, 2022 CVE published
September 17, 2024 Record updated