CVE Feed

    Dashboard / CVE / CVE-2022-31481

    CVE-2022-31481

    An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The overflowed data can allow the attacker to manipulate the “normal” code execution to that of their choosing. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable.

    Published:Jun 6, 2022
    Last Modified:Nov 21, 2024
    EPS:Jun 6, 2022
    EPSS Score:0.01262
    CVSS Score:10

    Affected Products

    Vendor
    Carrier
    Product
    Lenels2 Lnl-4420
    Vendor
    Carrier
    Product
    Lenels2 Lnl-4420 Firmware
    Vendor
    Carrier
    Product
    Lenels2 Lnl-x2210
    Vendor
    Carrier
    Product
    Lenels2 Lnl-x2210 Firmware
    Vendor
    Carrier
    Product
    Lenels2 Lnl-x2220
    Vendor
    Carrier
    Product
    Lenels2 Lnl-x2220 Firmware
    Vendor
    Carrier
    Product
    Lenels2 Lnl-x3300
    Vendor
    Carrier
    Product
    Lenels2 Lnl-x3300 Firmware
    Vendor
    Carrier
    Product
    Lenels2 Lnl-x4420
    Vendor
    Carrier
    Product
    Lenels2 Lnl-x4420 Firmware
    Vendor
    Carrier
    Product
    Lenels2 S2-lp-1501
    Vendor
    Carrier
    Product
    Lenels2 S2-lp-1501 Firmware
    Vendor
    Carrier
    Product
    Lenels2 S2-lp-1502
    Vendor
    Carrier
    Product
    Lenels2 S2-lp-1502 Firmware
    Vendor
    Carrier
    Product
    Lenels2 S2-lp-2500
    Vendor
    Carrier
    Product
    Lenels2 S2-lp-2500 Firmware
    Vendor
    Carrier
    Product
    Lenels2 S2-lp-4502
    Vendor
    Carrier
    Product
    Lenels2 S2-lp-4502 Firmware
    Vendor
    Hidglobal
    Product
    Ep4502
    Vendor
    Hidglobal
    Product
    Ep4502 Firmware
    Vendor
    Hidglobal
    Product
    Lp1501
    Vendor
    Hidglobal
    Product
    Lp1501 Firmware
    Vendor
    Hidglobal
    Product
    Lp1502
    Vendor
    Hidglobal
    Product
    Lp1502 Firmware
    Vendor
    Hidglobal
    Product
    Lp2500
    Vendor
    Hidglobal
    Product
    Lp2500 Firmware
    Vendor
    Hidglobal
    Product
    Lp4502
    Vendor
    Hidglobal
    Product
    Lp4502 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-31486 (CVSS 8.8) — An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execut…
    CVE-2022-31485 (CVSS 5.3) — An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home pag…
    CVE-2022-31484 (CVSS 7.5) — An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interfac…
    CVE-2022-31483 (CVSS 9.1) — An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to u…
    CVE-2022-31482 (CVSS 7.5) — An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can o…
    CVE-2022-31480 (CVSS 7.5) — An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a…
    CVE-2022-31479 (CVSS 9.6) — An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell co…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High