PatchTheCVECVE-2022-30622: Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it
CVE-2022-30622 is a medium-severity flaw (CVSS 5.3) affecting p5e gnss firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sys_username_passwd.cmd - The server loads the request clearly by default. Disclosure of hard-coded credit information within the JS code sent to the customer within the Login.js file is a strong user (which is not documented) and also the password, which allow for super-user
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.2% (top 93%) |
| CISA exploited list | No |
| Weakness | CWE-798 |
| Published | 2022-07-17 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-30622?
p5e gnss firmware: upgrade to newer than 4.1. Exact commands for each OS are on this page.
Is CVE-2022-30622 being exploited?
CVE-2022-30622 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-30622 affect?
CVE-2022-30622 affects p5e gnss firmware. Severity is medium (CVSS 5.3). Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sys_username_passwd.cmd - The server loads the request clearly by d
How urgent is CVE-2022-30622?
Priority 20/100. No elevated risk signals yet.
Related CVEs
- CVE-2022-30627 MEDIUM 5.7 MITIGATE This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021
- CVE-2022-30626 MEDIUM 6.3 MITIGATE Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show in the name of the existing access point on the c
- CVE-2022-30625 MEDIUM 5.7 MITIGATE Directory listing is a web server function that displays the directory contents when there is no index file in
- CVE-2022-30624 MEDIUM 6.8 MITIGATE Browsing the admin.html page allows the user to reset the admin password
- CVE-2022-30623 MEDIUM 5.9 MITIGATE The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of