Strix
26.1K

CVE-2022-31479

CRITICALCVSS 9.8/10EPSS 2.32%

Last modified

CVE-2022-31479 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. EPSS estimates a 2.32% chance of exploitation in the next 30 days.

Description

An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable. The injected commands only get executed during start up or when unsafe calls regarding the hostname are used. This allows the attacker to gain remote access to the device and can make their persistence permanent by modifying the filesystem.

Metrics

CVSS 3.1
9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
2.32%

81.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
HidglobalLp1501 Firmware< 1.302
HidglobalLp1502 Firmware< 1.302
HidglobalLp2500 Firmware< 1.302
HidglobalLp4502 Firmware< 1.302
HidglobalEp4502 Firmware< 1.296
CarrierLenels2 Lnl-4420 Firmware< 1.296
CarrierLenels2 Lnl-X2210 Firmware< 1.302
CarrierLenels2 Lnl-X2220 Firmware< 1.302
CarrierLenels2 Lnl-X3300 Firmware< 1.302
CarrierLenels2 Lnl-X4420 Firmware< 1.302
CarrierLenels2 S2-Lp-1501 Firmware< 1.302
CarrierLenels2 S2-Lp-1502 Firmware< 1.302
CarrierLenels2 S2-Lp-2500 Firmware< 1.302
CarrierLenels2 S2-Lp-4502 Firmware< 1.302

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-31479?
An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable. The injected commands only get executed during start up or when unsafe calls regarding the hostname are used. This allows the attacker to gain remote access to the device and can make their persistence permanent by modifying the filesystem.
How severe is CVE-2022-31479?
CVE-2022-31479 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 2.32% probability of exploitation in the next 30 days.
How do I fix CVE-2022-31479?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-31479?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST