CVE-2022-30623 Chcnav - P5E GNSS Authentication bypass
Attackers can bypass authentication on Chcnav P5E GNSS devices by manipulating a specific cookie value, gaining unauthorized access to the system.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-30623?
CVE-2022-30623 is a medium-severity authentication bypass vulnerability in Chcnav - P5E GNSS, published on 18 Jul 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status and its value is set to true to bypass the identification with the system using a username and password.
Which versions are affected by CVE-2022-30623?
It affects 1 product.
Products include Chcnav P5e Gnss Firmware.
How do I fix CVE-2022-30623?
No fix has been published for CVE-2022-30623 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-30623 being exploited?
There is no known exploitation of CVE-2022-30623 in the wild and no public exploit code.
Other vulnerabilities in Chcnav - P5E GNSS
- CVE-2022-30624 Chcnav - P5E GNSS Authentication bypass admin password reset
- CVE-2022-30626 Chcnav - P5E GNSS API not secure
- CVE-2022-30625 Chcnav - P5E GNSS Directory listing
- CVE-2022-30627 Chcnav - P5E GNSS Information disclosure hard coded credentials.
- CVE-2022-30622 Chcnav - P5E GNSS Information disclosure
Sources
Also known as GHSA-5mcf-4jxx-fhq7.