1. Home
  2. CVE Database
  3. CVE-2022-31485
MEDIUM · 5.3

CVE-2022-31485

An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vulnerability impacts products based on HID Mercury Intellige...

Vulnerability Description

An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
HidglobalLp1501 Firmware< 1.29
HidglobalLp1501-
HidglobalLp1502 Firmware< 1.29
HidglobalLp1502-
HidglobalLp2500 Firmware< 1.29
HidglobalLp2500-
HidglobalLp4502 Firmware< 1.29
HidglobalLp4502-
HidglobalEp4502 Firmware< 1.29
HidglobalEp4502-
CarrierLenels2 Lnl-4420 Firmware< 1.29
CarrierLenels2 Lnl-4420-
CarrierLenels2 Lnl-X2210 Firmware< 1.29
CarrierLenels2 Lnl-X2210-
CarrierLenels2 Lnl-X2220 Firmware< 1.29
CarrierLenels2 Lnl-X2220-
CarrierLenels2 Lnl-X3300 Firmware< 1.29
CarrierLenels2 Lnl-X3300-
CarrierLenels2 Lnl-X4420 Firmware< 1.29
CarrierLenels2 Lnl-X4420-

Related Weaknesses (CWE)

CWE-425

References

FAQ

What is CVE-2022-31485?

CVE-2022-31485 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vulnerability impacts products based on HID Mercury Intellige...

How severe is CVE-2022-31485?

CVE-2022-31485 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-31485?

Check the references section above for vendor advisories and patch information. Affected products include: Hidglobal Lp1501 Firmware, Hidglobal Lp1501, Hidglobal Lp1502 Firmware, Hidglobal Lp1502, Hidglobal Lp2500 Firmware.