CVE-2022-31481criticalCWE-120

CVE-2022-31481: fallo crítico en HID Mercury LP1501

Remote Code Execution via buffer overflow in firmware update process

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear EP4502+ Monitorear LP1501

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 10epss 1.6%
An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The overflowed data can allow the attacker to manipulate the “normal” code execution to that of their choosing. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
HID Mercury · EP4502HID Mercury · LP1501HID Mercury · LP1502HID Mercury · LP2500HID Mercury · LP4502LenelS2 · LNL-4420LenelS2 · LNL-X2210LenelS2 · LNL-X2220LenelS2 · LNL-X3300LenelS2 · LNL-X4420LenelS2 · S2-LP-1501LenelS2 · S2-LP-1502LenelS2 · S2-LP-2500LenelS2 · S2-LP-4502
CVEs relacionadas — HID Mercury LP1501

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-31479CRITICALRemote Code Execution via command injection of the hostnameEPSS 2.4%CVE-2022-31483CRITICALArbitrary file write via authenticated OSDP file uploadEPSS 1.8%CVE-2022-31486HIGHCommand injection via Advanced Networking route add functionalityEPSS 1.4%CVE-2022-31484HIGHUser Account Deletion UnauthenticatedEPSS 1.1%CVE-2022-31482HIGHDenial-of-Service via internal structure overflowEPSS 1.1%CVE-2022-31480HIGHUnauthenticated Firmware Upload and Arbitrary RebootEPSS 1.0%