CVE-2022-31486

🗓️ 06 Jun 2022 16:41:46Reported by CarrierType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 94 Views

CVE-2022-31486 Authenticated attacker can execute shell commands via "edit_route.cgi" binary in HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, EP4502 firmware

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2022-31486	2 Jun 202222:00	–	attackerkb
Circl	CVE-2022-31486	6 Jun 202220:30	–	circl
CNNVD	Carrier LenelS2 HID Mercury access panels 操作系统命令注入漏洞	2 Jun 202200:00	–	cnnvd
CNVD	Carrier LenelS2 HID Mercury access panels OS command injection vulnerability	5 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-31486 Command injection via Advanced Networking route add functionality	6 Jun 202216:41	–	cvelist
EUVD	EUVD-2022-52946	3 Oct 202520:07	–	euvd
ICS	Carrier LenelS2 HID Mercury access panels	2 Jun 202200:00	–	ics
NVD	CVE-2022-31486	6 Jun 202217:15	–	nvd
Prion	Design/Logic Flaw	6 Jun 202217:15	–	prion
The Hacker News	Researchers Disclose Critical Flaws in Industrial Access Controllers from HID Mercury	10 Jun 202207:03	–	thn

NVD

Node

hidglobal lp1501_firmwareRange<1.303

AND

hidglobal lp1501Match-

Node

hidglobal lp1502_firmwareRange<1.303

AND

hidglobal lp1502Match-

Node

hidglobal lp2500_firmwareRange<1.303

AND

hidglobal lp2500Match-

Node

hidglobal lp4502_firmwareRange<1.303

AND

hidglobal lp4502Match-

Node

hidglobal ep4502_firmwareRange<1.297

AND

hidglobal ep4502Match-

Node

carrier lenels2_lnl-4420_firmwareRange<1.297

AND

carrier lenels2_lnl-4420Match-

Node

carrier lenels2_lnl-x2210_firmwareRange<1.303

AND

carrier lenels2_lnl-x2210Match-

Node

carrier lenels2_lnl-x2220_firmwareRange<1.303

AND

carrier lenels2_lnl-x2220Match-

Node

carrier lenels2_lnl-x3300_firmwareRange<1.303

AND

carrier lenels2_lnl-x3300Match-

Node

carrier lenels2_lnl-x4420_firmwareRange<1.303

AND

carrier lenels2_lnl-x4420Match-

Node

carrier lenels2_s2-lp-1501_firmwareRange<1.303

AND

carrier lenels2_s2-lp-1501Match-

Node

carrier lenels2_s2-lp-1502_firmwareRange<1.303

AND

carrier lenels2_s2-lp-1502Match-

Node

carrier lenels2_s2-lp-2500_firmwareRange<1.303

AND

carrier lenels2_s2-lp-2500Match-

Node

carrier lenels2_s2-lp-4502_firmwareRange<1.303

AND

carrier lenels2_s2-lp-4502Match-

[
  {
    "product": "LNL-X2210",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.303",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LNL-X2220",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.303",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LNL-X3300",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.303",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LNL-X4420",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.303",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LNL-4420",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.297",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "S2-LP-1501",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.303",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "S2-LP-1502",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.303",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "S2-LP-2500",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.303",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "S2-LP-4502",
    "vendor": "LenelS2",
    "versions": [
      {
        "lessThan": "1.303",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LP1501",
    "vendor": "HID Mercury",
    "versions": [
      {
        "lessThan": "1.303",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LP1502",
    "vendor": "HID Mercury",
    "versions": [
      {
        "lessThan": "1.303",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LP2500",
    "vendor": "HID Mercury",
    "versions": [
      {
        "lessThan": "1.303",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LP4502",
    "vendor": "HID Mercury",
    "versions": [
      {
        "lessThan": "1.303",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "EP4502",
    "vendor": "HID Mercury",
    "versions": [
      {
        "lessThan": "1.297",
        "status": "affected",
        "version": "ALL",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
corporate	www.corporate.carrier.com/product-security/advisories-resources/

21 Nov 2024 07:04Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

CVSS 29

EPSS0.00978

CWE-78