CVE-2022-31479

🗓️ 06 Jun 2022 16:36:46Reported by CarrierType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 110 Views

An unauthenticated attacker can update the hostname with a specially crafted name to execute shell commands in HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 with firmware < 1.302 for LP series and 1.296 for EP series

Reporter	Title	Published	Views	Family All 19
ATTACKERKB	CVE-2022-31479	2 Jun 202222:00	–	attackerkb
BDU FSTEC	The vulnerability of HID Mercury programmable logic controllers’ microprogramming software relates to a flaw in the data protection mechanism, allowing an attacker to execute arbitrary shell commands.	8 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-31479	7 Jun 202208:16	–	circl
CNNVD	Carrier LenelS2 HID Mercury access panels 操作系统命令注入漏洞	2 Jun 202200:00	–	cnnvd
CNVD	Carrier LenelS2 HID Mercury access panels protection mechanism failure vulnerability	5 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-31479 Remote Code Execution via command injection of the hostname	6 Jun 202216:36	–	cvelist
EUVD	EUVD-2022-52939	3 Oct 202520:07	–	euvd
ICS	Carrier LenelS2 HID Mercury access panels	2 Jun 202200:00	–	ics
NVD	CVE-2022-31479	6 Jun 202217:15	–	nvd
OSV	CVE-2022-31479	6 Jun 202217:15	–	osv

NVD

Node

hidglobal lp1501_firmwareRange<1.302

AND

hidglobal lp1501Match-

Node

hidglobal lp1502_firmwareRange<1.302

AND

hidglobal lp1502Match-

Node

hidglobal lp2500_firmwareRange<1.302

AND

hidglobal lp2500Match-

Node

hidglobal lp4502_firmwareRange<1.302

AND

hidglobal lp4502Match-

Node

hidglobal ep4502_firmwareRange<1.296

AND

hidglobal ep4502Match-

Node

carrier lenels2_lnl-4420_firmwareRange<1.296

AND

carrier lenels2_lnl-4420Match-

Node

carrier lenels2_lnl-x2210_firmwareRange<1.302

AND

carrier lenels2_lnl-x2210Match-

Node

carrier lenels2_lnl-x2220_firmwareRange<1.302

AND

carrier lenels2_lnl-x2220Match-

Node

carrier lenels2_lnl-x3300_firmwareRange<1.302

AND

carrier lenels2_lnl-x3300Match-

Node

carrier lenels2_lnl-x4420_firmwareRange<1.302

AND

carrier lenels2_lnl-x4420Match-

Node

carrier lenels2_s2-lp-1501_firmwareRange<1.302

AND

carrier lenels2_s2-lp-1501Match-

Node

carrier lenels2_s2-lp-1502_firmwareRange<1.302

AND

carrier lenels2_s2-lp-1502Match-

Node

carrier lenels2_s2-lp-2500_firmwareRange<1.302

AND

carrier lenels2_s2-lp-2500Match-

Node

carrier lenels2_s2-lp-4502_firmwareRange<1.302

AND

carrier lenels2_s2-lp-4502Match-

[
  {
    "product": "LNL-X2210",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.302",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LNL-X2220",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.302",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LNL-X3300",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.302",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LNL-X4420",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.302",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LNL-4420",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.296",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "S2-LP-1501",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.302",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "S2-LP-1502",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.302",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "S2-LP-2500",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.302",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "S2-LP-4502",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.302",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LP1501",
    "vendor": "HID Mercury",
    "versions": [
      {
        "lessThan": "1.302",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LP1502",
    "vendor": "HID Mercury",
    "versions": [
      {
        "lessThan": "1.302",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LP2500",
    "vendor": "HID Mercury",
    "versions": [
      {
        "lessThan": "1.302",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LP4502",
    "vendor": "HID Mercury",
    "versions": [
      {
        "lessThan": "1.302",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "EP4502",
    "vendor": "HID Mercury",
    "versions": [
      {
        "lessThan": "1.296",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  }
]