2 matches found
Design/Logic Flaw
An authenticated attacker can send a specially crafted route to the “editroute.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.303...
9CVSS8.9AI score0.01379EPSS
SaveExploits0References1Affected Software14
CVE-2022-31486: Improper Neutralization of Special Elements used in an OS Command
An authenticated attacker can send a specially crafted route to the “editroute.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.303...
9CVSS8AI score0.01379EPSS
SaveExploits0References3
20