Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints. An unauthenticated remote attacker with network access to the device can execute HTTP GET requests to TCP port 8080 to retrieve internal network parameters including ECDIS & OT Information, device identifiers, and service status logs.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
关键功能的认证机制缺失
Vulnerability Title
Navtor NavBox 安全漏洞
Vulnerability Description
Navtor NavBox是挪威Navtor公司的一款用于船舶电子海图管理和航行数据同步的航运信息系统设备。 Navtor NavBox存在安全漏洞，该漏洞源于HTTP API端点缺少身份验证，可能导致未经身份验证的远程攻击者检索内部网络参数、设备标识符和服务状态日志。
CVSS Information
N/A
Vulnerability Type
N/A