Strix
26.1K

CVE-2022-31481

CRITICALCVSS 10/10EPSS 1.47%

Last modified

CVE-2022-31481 is a critical-severity vulnerability rated 10/10 on the CVSS scale. An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. EPSS estimates a 1.47% chance of exploitation in the next 30 days.

Description

An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The overflowed data can allow the attacker to manipulate the “normal” code execution to that of their choosing. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable.

Metrics

CVSS 3.1
10/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS Probability
1.47%

70.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
HidglobalLp1501 Firmware< 1.302
HidglobalLp1502 Firmware< 1.302
HidglobalLp2500 Firmware< 1.302
HidglobalLp4502 Firmware< 1.302
HidglobalEp4502 Firmware< 1.296
CarrierLenels2 Lnl-4420 Firmware< 1.296
CarrierLenels2 Lnl-X2210 Firmware< 1.302
CarrierLenels2 Lnl-X2220 Firmware< 1.302
CarrierLenels2 Lnl-X3300 Firmware< 1.302
CarrierLenels2 Lnl-X4420 Firmware< 1.302
CarrierLenels2 S2-Lp-1501 Firmware< 1.302
CarrierLenels2 S2-Lp-1502 Firmware< 1.302
CarrierLenels2 S2-Lp-2500 Firmware< 1.302
CarrierLenels2 S2-Lp-4502 Firmware< 1.302

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-31481?
An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The overflowed data can allow the attacker to manipulate the “normal” code execution to that of their choosing. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable.
How severe is CVE-2022-31481?
CVE-2022-31481 has a CVSS score of 10/10 (CRITICAL severity). The EPSS model estimates a 1.47% probability of exploitation in the next 30 days.
How do I fix CVE-2022-31481?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-31481?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST