Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

hidglobal lp1501 firmware vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2022-31479
An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502,...
Hidglobal Lp1501 FirmwareHidglobal Lp1502 FirmwareHidglobal Lp2500 FirmwareHidglobal Lp4502 FirmwareHidglobal Ep4502 FirmwareCarrier Lenels2 Lnl-4420 FirmwareCarrier Lenels2 Lnl-x2210 FirmwareCarrier Lenels2 Lnl-x2220 FirmwareCarrier Lenels2 Lnl-x3300 FirmwareCarrier Lenels2 Lnl-x4420 FirmwareCarrier Lenels2 S2-lp-1501 FirmwareCarrier Lenels2 S2-lp-1502 FirmwareCarrier Lenels2 S2-lp-2500 FirmwareCarrier Lenels2 S2-lp-4502 Firmware
7.5
CVSSv2
CVE-2022-31481
An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions before 1.302 ...
Hidglobal Lp1501 FirmwareHidglobal Lp1502 FirmwareHidglobal Lp2500 FirmwareHidglobal Lp4502 FirmwareHidglobal Ep4502 FirmwareCarrier Lenels2 Lnl-4420 FirmwareCarrier Lenels2 Lnl-x2210 FirmwareCarrier Lenels2 Lnl-x2220 FirmwareCarrier Lenels2 Lnl-x3300 FirmwareCarrier Lenels2 Lnl-x4420 FirmwareCarrier Lenels2 S2-lp-1501 FirmwareCarrier Lenels2 S2-lp-1502 FirmwareCarrier Lenels2 S2-lp-2500 FirmwareCarrier Lenels2 S2-lp-4502 Firmware
9
CVSSv2
CVE-2022-31483
An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the desired file anywhere on the filesystem. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502...
Hidglobal Lp1501 FirmwareHidglobal Lp1502 FirmwareHidglobal Lp2500 FirmwareHidglobal Lp4502 FirmwareHidglobal Ep4502 FirmwareCarrier Lenels2 Lnl-4420 FirmwareCarrier Lenels2 Lnl-x2210 FirmwareCarrier Lenels2 Lnl-x2220 FirmwareCarrier Lenels2 Lnl-x3300 FirmwareCarrier Lenels2 Lnl-x4420 FirmwareCarrier Lenels2 S2-lp-1501 FirmwareCarrier Lenels2 S2-lp-1502 FirmwareCarrier Lenels2 S2-lp-2500 FirmwareCarrier Lenels2 S2-lp-4502 Firmware
5
CVSSv2
CVE-2022-31484
An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions before 1.29...
Hidglobal Lp1501 FirmwareHidglobal Lp1502 FirmwareHidglobal Lp2500 FirmwareHidglobal Lp4502 FirmwareHidglobal Ep4502 FirmwareCarrier Lenels2 Lnl-4420 FirmwareCarrier Lenels2 Lnl-x2210 FirmwareCarrier Lenels2 Lnl-x2220 FirmwareCarrier Lenels2 Lnl-x3300 FirmwareCarrier Lenels2 Lnl-x4420 FirmwareCarrier Lenels2 S2-lp-1501 FirmwareCarrier Lenels2 S2-lp-1502 FirmwareCarrier Lenels2 S2-lp-2500 FirmwareCarrier Lenels2 S2-lp-4502 Firmware
9
CVSSv2
CVE-2022-31486
An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain fi...
Hidglobal Lp1501 FirmwareHidglobal Lp1502 FirmwareHidglobal Lp2500 FirmwareHidglobal Lp4502 FirmwareHidglobal Ep4502 FirmwareCarrier Lenels2 Lnl-4420 FirmwareCarrier Lenels2 Lnl-x2210 FirmwareCarrier Lenels2 Lnl-x2220 FirmwareCarrier Lenels2 Lnl-x3300 FirmwareCarrier Lenels2 Lnl-x4420 FirmwareCarrier Lenels2 S2-lp-1501 FirmwareCarrier Lenels2 S2-lp-1502 FirmwareCarrier Lenels2 S2-lp-2500 FirmwareCarrier Lenels2 S2-lp-4502 Firmware
5
CVSSv2
CVE-2022-31480
An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service (DoS). This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmwa...
Hidglobal Lp1501 FirmwareHidglobal Lp1502 FirmwareHidglobal Lp2500 FirmwareHidglobal Lp4502 FirmwareHidglobal Ep4502 FirmwareCarrier Lenels2 Lnl-4420 FirmwareCarrier Lenels2 Lnl-x2210 FirmwareCarrier Lenels2 Lnl-x2220 FirmwareCarrier Lenels2 Lnl-x3300 FirmwareCarrier Lenels2 Lnl-x4420 FirmwareCarrier Lenels2 S2-lp-1501 FirmwareCarrier Lenels2 S2-lp-1502 FirmwareCarrier Lenels2 S2-lp-2500 FirmwareCarrier Lenels2 S2-lp-4502 Firmware
7.8
CVSSv2
CVE-2022-31482
An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versi...
Hidglobal Lp1501 FirmwareHidglobal Lp1502 FirmwareHidglobal Lp2500 FirmwareHidglobal Lp4502 FirmwareHidglobal Ep4502 FirmwareCarrier Lenels2 Lnl-4420 FirmwareCarrier Lenels2 Lnl-x2210 FirmwareCarrier Lenels2 Lnl-x2220 FirmwareCarrier Lenels2 Lnl-x3300 FirmwareCarrier Lenels2 Lnl-x4420 FirmwareCarrier Lenels2 S2-lp-1501 FirmwareCarrier Lenels2 S2-lp-1502 FirmwareCarrier Lenels2 S2-lp-2500 FirmwareCarrier Lenels2 S2-lp-4502 Firmware
5
CVSSv2
CVE-2022-31485
An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which cont...
Hidglobal Lp1501 FirmwareHidglobal Lp1502 FirmwareHidglobal Lp2500 FirmwareHidglobal Lp4502 FirmwareHidglobal Ep4502 FirmwareCarrier Lenels2 Lnl-4420 FirmwareCarrier Lenels2 Lnl-x2210 FirmwareCarrier Lenels2 Lnl-x2220 FirmwareCarrier Lenels2 Lnl-x3300 FirmwareCarrier Lenels2 Lnl-x4420 FirmwareCarrier Lenels2 S2-lp-1501 FirmwareCarrier Lenels2 S2-lp-1502 FirmwareCarrier Lenels2 S2-lp-2500 FirmwareCarrier Lenels2 S2-lp-4502 Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook