CVE-2022-31486highCWE-78

CVE-2022-31486: fallo de gravedad alta en HID Mercury LP1501

Command injection via Advanced Networking route add functionality

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear EP4502+ Monitorear LP1501

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.8epss 1.4%
An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.303 for the LP series and 1.297 for the EP series. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
HID Mercury · EP4502HID Mercury · LP1501HID Mercury · LP1502HID Mercury · LP2500HID Mercury · LP4502LenelS2 · LNL-4420LenelS2 · LNL-X2210LenelS2 · LNL-X2220LenelS2 · LNL-X3300LenelS2 · LNL-X4420LenelS2 · S2-LP-1501LenelS2 · S2-LP-1502LenelS2 · S2-LP-2500LenelS2 · S2-LP-4502
CVEs relacionadas — HID Mercury LP1501

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-31479CRITICALRemote Code Execution via command injection of the hostnameEPSS 2.4%CVE-2022-31483CRITICALArbitrary file write via authenticated OSDP file uploadEPSS 1.8%CVE-2022-31481CRITICALRemote Code Execution via buffer overflow in firmware update processEPSS 1.6%CVE-2022-31484HIGHUser Account Deletion UnauthenticatedEPSS 1.1%CVE-2022-31482HIGHDenial-of-Service via internal structure overflowEPSS 1.1%CVE-2022-31480HIGHUnauthenticated Firmware Upload and Arbitrary RebootEPSS 1.0%