Lucene search

[email protected]NVD:CVE-2022-31485

HistoryJun 06, 2022 - 5:15 p.m.

CVE-2022-31485

2022-06-0617:15:11

CWE-425

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

0.001 Low

EPSS

Percentile

33.2%

JSON

An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29.

Affected configurations

NVD

Node

hidgloballp1501_firmwareRange<1.29

AND

hidgloballp1501Match-

Node

hidgloballp1502_firmwareRange<1.29

AND

hidgloballp1502Match-

Node

hidgloballp2500_firmwareRange<1.29

AND

hidgloballp2500Match-

Node

hidgloballp4502_firmwareRange<1.29

AND

hidgloballp4502Match-

Node

hidglobalep4502_firmwareRange<1.29

AND

hidglobalep4502Match-

Node

carrierlenels2_lnl-4420_firmwareRange<1.29

AND

carrierlenels2_lnl-4420Match-

Node

carrierlenels2_lnl-x2210_firmwareRange<1.29

AND

carrierlenels2_lnl-x2210Match-

Node

carrierlenels2_lnl-x2220_firmwareRange<1.29

AND

carrierlenels2_lnl-x2220Match-

Node

carrierlenels2_lnl-x3300_firmwareRange<1.29

AND

carrierlenels2_lnl-x3300Match-

Node

carrierlenels2_lnl-x4420_firmwareRange<1.29

AND

carrierlenels2_lnl-x4420Match-

Node

carrierlenels2_s2-lp-1501_firmwareRange<1.29

AND

carrierlenels2_s2-lp-1501Match-

Node

carrierlenels2_s2-lp-1502_firmwareRange<1.29

AND

carrierlenels2_s2-lp-1502Match-

Node

carrierlenels2_s2-lp-2500_firmwareRange<1.29

AND

carrierlenels2_s2-lp-2500Match-

Node

carrierlenels2_s2-lp-4502_firmwareRange<1.29

AND

carrierlenels2_s2-lp-4502Match-

References

www.corporate.carrier.com/product-security/advisories-resources/

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

0.001 Low

EPSS

Percentile

33.2%

JSON

Related for NVD:CVE-2022-31485

prion1 cvelist1 cve1 cnvd1 thn1 trellix6 ics1