CVE-2022-30627: Chcnav - P5E GNSS Information disclosure hard coded credentials.

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-07-18 · updated 2026-06-17
Weakness: CWE-798

Description

This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104, update_i50_v1.0.55_b20200509, update_x6_v2.1.2_b202001127, update_b5_v2.0.9_b20200706. This vulnerability makes it possible to extract from the FW the existing user passwords on their operating systems and passwords.

Affected products

Chcnav - P5E GNSS: 4.1, 4.2, update_b5_v2.0.9_b20200706, update_i50_v1.0.55_b20200509, update_i90_cv2.021_b20210104, update_x6_v2.1.2_b202001127

References

https://www.gov.il/en/Departments/faq/cve_advisories
https://www.gov.il/en/Departments/faq/cve_advisories

Get alerted when CVE-2022-30627 or the next vulnerability affects your stack