Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-31480

Unauthenticated Firmware Upload and Arbitrary Reboot

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Carrier

Description

An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service (DoS). This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The attacker needs to have a properly signed and encrypted binary, loading the firmware to the device ultimately triggers a reboot.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LenelS2 LNL-X2210

  • ALL to < 1.302affected

LenelS2 LNL-X2220

  • ALL to < 1.302affected

LenelS2 LNL-X3300

  • ALL to < 1.302affected

LenelS2 LNL-X4420

  • ALL to < 1.302affected

LenelS2 LNL-4420

  • ALL to < 1.296affected

LenelS2 S2-LP-1501

  • ALL to < 1.302affected

LenelS2 S2-LP-1502

  • ALL to < 1.302affected

LenelS2 S2-LP-2500

  • ALL to < 1.302affected

LenelS2 S2-LP-4502

  • ALL to < 1.302affected

HID Mercury LP1501

  • ALL to < 1.302affected

HID Mercury LP1502

  • ALL to < 1.302affected

HID Mercury LP2500

  • ALL to < 1.302affected

HID Mercury LP4502

  • ALL to < 1.302affected

HID Mercury EP4502

  • ALL to < 1.296affected

References