CVE-2022-31481

CVE-2022-31481 is an unauthenticated firmware upload vulnerability in HID Mercury/LNL-4420 panels (Mercury LP/EP series context in vendor disclosures) that enables remote arbitrary code execution via a buffer overflow during firmware image processing. Specifically, the firmware update flow in a C...