PatchTheCVEchcnav vulnerabilities
Recent CVEs affecting chcnav products. 6 tracked.
chcnav has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-07-18. Highest priority: CVE-2022-30624 (score 31/100).
- CVE-2022-30627 MEDIUM 5.7 MITIGATE This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021
- CVE-2022-30626 MEDIUM 6.3 MITIGATE Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show in the name of the existing access point on the c
- CVE-2022-30625 MEDIUM 5.7 MITIGATE Directory listing is a web server function that displays the directory contents when there is no index file in
- CVE-2022-30624 MEDIUM 6.8 MITIGATE Browsing the admin.html page allows the user to reset the admin password
- CVE-2022-30623 MEDIUM 5.9 MITIGATE The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of
- CVE-2022-30622 MEDIUM 5.3 UPGRADE Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it
FAQ
How do I fix chcnav vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is chcnav being exploited right now?
None of the tracked chcnav CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which chcnav CVE should I patch first?
CVE-2022-30624 currently ranks highest (31/100): Browsing the admin.html page allows the user to reset the admin password.