PT-2022-20216 · Chcnav · Chcnav - P5E Gnss+1

Metadata · Published 2022-07-18 · Updated 2022-07-23 · CVE-2022-30625

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. This provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences vary depending on which files are listed and accessible.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

CWE-548

Related Identifiers

CVE-2022-30625

Affected Products

Chcnav - P5E Gnss

P5E Gnss Firmware

References · 5

• https://osv.dev/vulnerability/CVE-2022-30625 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30625 · Security Note
• https://t.me/cibsecurity/46433 · Telegram Post
• https://gov.il/en/Departments/faq/cve_advisories · Note
• https://t.me/cvenotify/33293 · Telegram Post