Chcnav P5e Gnss Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Chcnav P5e Gnss Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-30624 — CVSS 6.8 (medium): Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password.
• CVE-2022-30626 — CVSS 6.3 (medium): Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show in the name of the existing access point on the component, and a password in…
• CVE-2022-30623 — CVSS 5.9 (medium): The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status and its value is…
• CVE-2022-30625 — CVSS 5.7 (medium): Directory listing is a web server function that displays the directory contents when there is no index file in a specific website…
• CVE-2022-30627 — CVSS 5.7 (medium): This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104…
• CVE-2022-30622 — CVSS 5.3 (medium): Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter…