CVE-2022-30627

Published: Jul 18, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104, update_i50_v1.0.55_b20200509, update_x6_v2.1.2_b202001127, update_b5_v2.0.9_b20200706. This vulnerability makes it possible to extract from the FW the existing user passwords on their operating systems and passwords.

Affected (6)

Products: Chcnav: P5e Gnss Firmware

Chcnav

1 product

P5e Gnss Firmware

Configuration A

6 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Chcnav P5e Gnss Firmware	Version 4.1
Chcnav P5e Gnss Firmware	Version 4.2
Chcnav P5e Gnss Firmware	Version update_b5_v2.0.9_b20200706
Chcnav P5e Gnss Firmware	Version update_i50_v1.0.55_b20200509
Chcnav P5e Gnss Firmware	Version update_i90_cv2.021_b20210104
Chcnav P5e Gnss Firmware	Version update_x6_v2.1.2_b202001127

Running on/with	Platform Versions
Chcnav P5e Gnss	All versions

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

https://www.gov.il/en/Departments/faq/cve_advisories

Source: cna@cyber.gov.il

Third Party Advisory

https://www.gov.il/en/Departments/faq/cve_advisories

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.