CVE-2022-31485

Unauthenticated homepage note modification

CVSS 5.3 MEDIUMEPSS 0.8%CWE-425

An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Productos afectados

HID Mercury · EP4502 HID Mercury · LP1501 HID Mercury · LP1502 HID Mercury · LP2500 HID Mercury · LP4502 LenelS2 · LNL-4420 LenelS2 · LNL-X2210 LenelS2 · LNL-X2220 LenelS2 · LNL-X3300 LenelS2 · LNL-X4420 LenelS2 · S2-LP-1501 LenelS2 · S2-LP-1502 LenelS2 · S2-LP-2500 LenelS2 · S2-LP-4502

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://www.corporate.carrier.com/product-security/advisories-resources/