Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-31486
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Command injection via Advanced Networking route add functionality
Source: NVD (National Vulnerability Database)
Vulnerability Description
An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.303 for the LP series and 1.297 for the EP series. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Carrier LenelS2 HID Mercury access panels 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Carrier LenelS2 HID Mercury access panels是美国Carrier公司的一个控制器面板。 Carrier LenelS2 HID Mercury access panels 存在操作系统命令注入漏洞，该漏洞源于输入验证不当。远程用户可以将特制数据传递给应用程序并在目标系统上执行任意操作系统命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
LenelS2LNL-X2210 ALL ~ 1.303 -
LenelS2LNL-X2220 ALL ~ 1.303 -
LenelS2LNL-X3300 ALL ~ 1.303 -
LenelS2LNL-X4420 ALL ~ 1.303 -
LenelS2LNL-4420 ALL ~ 1.297 -
LenelS2S2-LP-1501 ALL ~ 1.303 -
LenelS2S2-LP-1502 ALL ~ 1.303 -
LenelS2S2-LP-2500 ALL ~ 1.303 -
LenelS2S2-LP-4502 ALL ~ 1.303 -
HID MercuryLP1501 ALL ~ 1.303 -
HID MercuryLP1502 ALL ~ 1.303 -
HID MercuryLP2500 ALL ~ 1.303 -
HID MercuryLP4502 ALL ~ 1.303 -
HID MercuryEP4502 ALL ~ 1.297 -
II. Public POCs for CVE-2022-31486
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2022-31486
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same product: LNL-X2210
Same vendor: LenelS2
Same weakness: CWE-78
V. Comments for CVE-2022-31486

No comments yet

Leave a comment