PT-2022-6517 · P5E Gnss · P5E Gnss

Metadata · Published 2022-07-13 · Updated 2022-07-23 · CVE-2022-30624

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions P5E GNSS (affected versions not specified)

Description The issue is related to weaknesses in the authentication procedure of the admin.html page in the P5E GNSS software. This allows a remote attacker to reset the admin password. The vulnerability is also present in the JavaScript code for the password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2023-01921

CVE-2022-30624

Affected Products

P5E Gnss

References · 6

• https://osv.dev/vulnerability/CVE-2022-30624 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01921 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-30624 · Security Note
• https://t.me/cvenotify/33294 · Telegram Post
• https://t.me/cibsecurity/46439 · Telegram Post
• https://gov.il/en/Departments/faq/cve_advisories · Note