← All advisories

High severity7.5NVD Advisory· Published Jul 24, 2018· Updated Jun 17, 2026

CVE-2018-5386

CVE-2018-5386

Description

Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information leak.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Navarino/Infinity3 versions
cpe:2.3:a:navarino:infinity:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:navarino:infinity:*:*:*:*:*:*:*:*range: <=2.2
- (no CPE)range: <=2.2
- (no CPE)range: 2.2

Patches

Vulnerability mechanics

References

4

packetstormsecurity.com/files/146506/Navarino-Infinity-Blind-SQL-Injection-Session-Fixation.htmlnvdExploitThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/103544nvdThird Party AdvisoryVDB Entry
www.kb.cert.org/vuls/id/184077nvdThird Party AdvisoryUS Government Resource
medium.com/%40evstykas/pwning-ships-vsat-for-fun-and-profit-ba0fe9f42fb3nvd

News mentions

0

No linked articles in our index yet.