Chcnav vulnerabilities
We track 3 vulnerabilities in Chcnav products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 18, 2022.
Latest Chcnav vulnerabilities
- 7.5 High severity
Chcnav - P5E GNSS: Use of Hard-coded Credentials
This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104, update_i50_v1.0.55_b20200509, update_x6_v2.1.2_b202001127, update_b5_v2.0.9_b20200706. This vulnerability makes it possible to extract fro
- 9.8 Critical severity
Chcnav - P5E GNSS: Improper Authentication
The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status and its value is set to true to bypass the identification with the system using a username and password.
- 7.3 High severity
Chcnav - P5E GNSS: Use of Hard-coded Credentials
Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sys_username_passwd.cmd - The server loads the request clearly by default. Disclosure o