This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104, update_i50_v1.0.55_b20200509, update_x6_v2.1.2_b202001127, update_b5_v2.0.9_b20200706. This vulnerability makes it possible to extract from the FW the existing user passwords on their operating systems and passwords.
References
| Link | Resource |
|---|---|
| https://www.gov.il/en/Departments/faq/cve_advisories | Third Party Advisory |
| https://www.gov.il/en/Departments/faq/cve_advisories | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.gov.il/en/Departments/faq/cve_advisories - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.7 |
23 Jul 2022, 02:18
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-798 | |
| CPE | cpe:2.3:o:chcnav:p5e_gnss_firmware:4.1:*:*:*:*:*:*:* cpe:2.3:o:chcnav:p5e_gnss_firmware:4.2:*:*:*:*:*:*:* cpe:2.3:o:chcnav:p5e_gnss_firmware:update_i90_cv2.021_b20210104:*:*:*:*:*:*:* cpe:2.3:o:chcnav:p5e_gnss_firmware:update_x6_v2.1.2_b202001127:*:*:*:*:*:*:* cpe:2.3:h:chcnav:p5e_gnss:-:*:*:*:*:*:*:* cpe:2.3:o:chcnav:p5e_gnss_firmware:update_i50_v1.0.55_b20200509:*:*:*:*:*:*:* cpe:2.3:o:chcnav:p5e_gnss_firmware:update_b5_v2.0.9_b20200706:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.gov.il/en/Departments/faq/cve_advisories - Third Party Advisory |
18 Jul 2022, 13:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-07-18 13:15
Updated : 2024-11-21 07:03
NVD link : CVE-2022-30627
Mitre link : CVE-2022-30627
CVE.ORG link : CVE-2022-30627
JSON object : View
Products Affected
chcnav
- p5e_gnss_firmware
- p5e_gnss
CWE
CWE-798
Use of Hard-coded Credentials