CVE-2022-26519: Carrier Hills Comnav Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Version 3002-19 interface, which allows local attackers to brute-force credentials.

Affected products

• Carrier Hills Comnav Firmware: up to and including 3002-19

Published 2022-04-20. Last modified 2026-06-17.