CVE Vulnerabilities

CVE-2022-30624

Improper Authentication

Published: Jul 18, 2022 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
P5e_gnss_firmware Chcnav 4.1 (including) 4.1 (including)
P5e_gnss_firmware Chcnav 4.2 (including) 4.2 (including)

Potential Mitigations

References