Carrier LenelS2 HID Mercury access panels
Successful exploitation of these vulnerabilities could allow an attacker access to the device, allowing monitoring of all communications sent to and from the device, modification of onboard relays, changing of configuration files, device instability, and a denial-of-service condition.
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-31486US | high8.8 | — | ||
An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mer… | ||||
| CVE-2022-31485US | medium5.3 | — | ||
An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vulnerability impacts products based on H… | ||||
| CVE-2022-31484US | high7.5 | — | ||
An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on HID Mercury Intelligen… | ||||
| CVE-2022-31483US | high8.8 | — | ||
An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the desired file anywhere on the filesystem. This vulnerability… | ||||
| CVE-2022-31482US | high7.5 | — | ||
An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mer… | ||||
| CVE-2022-31481US | critical10.0 | — | ||
An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent… | ||||
| CVE-2022-31480US | high7.5 | — | ||
An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service (DoS). This vulnerability impacts products based on… | ||||
| CVE-2022-31479US | critical9.8 | — | ||
An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process. This vulnera… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- MitigationHID Mercury access panels sold by LenelS2
Carrier recommends updating these access panels to the most current released firmware via the LenelS2 Partner Center. Please contact a Carrier support channel partner for instructions.
https://www.corporate.carrier.com/contact-us/ - MitigationHID Mercury access panels sold by LenelS2
Carrier recommends updating these access panels to the most current released firmware via the LenelS2 Partner Center. Please contact a Carrier support channel partner for instructions.
https://www.corporate.carrier.com/contact-us/ - MitigationHID Mercury access panels sold by LenelS2
Carrier recommends updating these access panels to the most current released firmware via the LenelS2 Partner Center. Please contact a Carrier support channel partner for instructions.
https://www.corporate.carrier.com/contact-us/ - MitigationHID Mercury access panels sold by LenelS2
Carrier recommends updating these access panels to the most current released firmware via the LenelS2 Partner Center. Please contact a Carrier support channel partner for instructions.
https://www.corporate.carrier.com/contact-us/ - MitigationHID Mercury access panels sold by LenelS2
Carrier recommends updating these access panels to the most current released firmware via the LenelS2 Partner Center. Please contact a Carrier support channel partner for instructions.
https://www.corporate.carrier.com/contact-us/ - MitigationHID Mercury access panels sold by LenelS2
Carrier recommends updating these access panels to the most current released firmware via the LenelS2 Partner Center. Please contact a Carrier support channel partner for instructions.
https://www.corporate.carrier.com/contact-us/ - MitigationHID Mercury access panels sold by LenelS2
Carrier recommends updating these access panels to the most current released firmware via the LenelS2 Partner Center. Please contact a Carrier support channel partner for instructions.
https://www.corporate.carrier.com/contact-us/ - MitigationHID Mercury access panels sold by LenelS2
Carrier recommends updating these access panels to the most current released firmware via the LenelS2 Partner Center. Please contact a Carrier support channel partner for instructions.
https://www.corporate.carrier.com/contact-us/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan