Carrier LenelS2 HID Mercury access panels is a controller panel from Carrier, U.S.A. An operating system command injection vulnerability exists in Carrier LenelS2 HID Mercury access panels, which could be exploited by an attacker to pass specially crafted data to an application and execute arbitrary operating system commands on the The vulnerability can be exploited to pass specially crafted data to an application and execute arbitrary operating system commands on the target system.