Browse all 3 CVE security advisories affecting Navarino. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Navarino is a maritime software provider specializing in navigation and fleet management systems. Historically, its products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation and authentication flaws. While no major public security incidents have been widely reported, the three CVEs on record highlight persistent issues in access control and secure coding practices. The company's focus on critical maritime infrastructure necessitates robust security measures, as vulnerabilities in navigation systems could potentially impact vessel operations and safety.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2018-5384 | Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection — InfinityCWE-89 | 9.8 | - | 2018-07-24 |
| CVE-2018-5385 | Navarino Infinity web interface up to version 2.2 is prone to session fixation attacks — InfinityCWE-384 | 8.8 | - | 2018-07-24 |
| CVE-2018-5386 | Some Navarino Infinity functions placed in the URL can bypass any authentication mechanism leading to an information leak — InfinityCWE-288 | 7.5 | - | 2018-07-24 |
This page lists every published CVE security advisory associated with Navarino. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.