P5e Gnss Firmware vulnerabilities
3 known vulnerabilities in P5e Gnss Firmware from Chcnav. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Chcnav - P5E GNSS: Use of Hard-coded Credentials
This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104, update_i50_v1.0.55_b20200509, update_x6_v2.1.2_b202001127, update_b5_v2.0.9_b20200706. This vulnerability makes it possible to extract fro
- 9.8 Critical severity
Chcnav - P5E GNSS: Improper Authentication
The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status and its value is set to true to bypass the identification with the system using a username and password.
- 7.3 High severity
Chcnav - P5E GNSS: Use of Hard-coded Credentials
Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sys_username_passwd.cmd - The server loads the request clearly by default. Disclosure o