PatchTheCVEnavarino vulnerabilities
Recent CVEs affecting navarino products. 3 tracked.
navarino has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2018-07-24. Highest priority: CVE-2018-5384 (score 67/100).
- CVE-2018-5386 HIGH 7.5 UPGRADE Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism
- CVE-2018-5385 HIGH 8.8 UPGRADE Navarino Infinity is prone to session fixation attacks
- CVE-2018-5384 CRITICAL 9.8 UPGRADE Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql
FAQ
How do I fix navarino vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is navarino being exploited right now?
None of the tracked navarino CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which navarino CVE should I patch first?
CVE-2018-5384 currently ranks highest (67/100): Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql.