Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-31455 State: PUBLISHED Published: 2023-07-26T00:00:00 Last Updated: 2024-10-23T18:54:48.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: * A cross-site scripting (XSS) vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a user chat box. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.acunetix.com/vulnerabilities/web/cross-site-scripting/ - https://medium.com/%40rohitgautam26/cve-2022-31455-bc929f477446
CVE ID: CVE-2022-31456 State: PUBLISHED Published: 2023-07-26T00:00:00 Last Updated: 2024-10-29T13:15:06.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.acunetix.com/vulnerabilities/web/cross-site-scripting/ - https://medium.com/%40rohitgautam26/cve-2022-31456-c8bbefba6cc1
CVE ID: CVE-2022-31457 State: PUBLISHED Published: 2023-07-25T00:00:00 Last Updated: 2024-10-24T14:46:44.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40rohitgautam26/cve-2022-31457-2027b7678af7
CVE ID: CVE-2022-31458 State: PUBLISHED Published: 2023-07-25T00:00:00 Last Updated: 2024-10-24T14:45:46.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.acunetix.com/vulnerabilities/web/host-header-attack/ - https://medium.com/%40rohitgautam26/cve-2022-31458-49b7818e8ac9
CVE ID: CVE-2022-31459 State: PUBLISHED Published: 2022-06-02T21:40:39 Last Updated: 2024-08-03T07:19:05.807Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AC:L/AV:A/A:N/C:H/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth. Additional Analyst Notes: - CVE Program Container: References: - https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/ - https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf - https://resources.owllabs.com/blog/owl-labs-upd
atic/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf - https://resources.owllabs.com/blog/owl-labs-update
CVE ID: CVE-2022-31460 State: PUBLISHED Published: 2022-06-02T21:39:38 Last Updated: 2024-08-03T07:19:05.702Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AC:L/AV:A/A:N/C:N/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value. Additional Analyst Notes: - CVE Program Container: References: - https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/ - https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf - https://resources.owllabs.c
//www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf - https://resources.owllabs.com/blog/owl-labs-update
CVE ID: CVE-2022-31461 State: PUBLISHED Published: 2022-06-02T21:40:27 Last Updated: 2024-08-03T07:19:06.068Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AC:L/AV:A/A:N/C:N/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message. Additional Analyst Notes: - CVE Program Container: References: - https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/ - https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf - https://resources.owllabs.com/blog/owl-lab
om/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf - https://resources.owllabs.com/blog/owl-labs-update
CVE ID: CVE-2022-31462 State: PUBLISHED Published: 2022-06-02T21:40:16 Last Updated: 2024-08-03T07:19:05.738Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AC:L/AV:A/A:N/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth broadcast data. Additional Analyst Notes: - CVE Program Container: References: - https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/ - https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RE
nce-device-imperil-100k-users/ - https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf - https://resources.owllabs.com/blog/owl-labs-update
CVE ID: CVE-2022-31463 State: PUBLISHED Published: 2022-06-02T21:39:52 Last Updated: 2024-08-03T07:19:05.768Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:A/A:N/C:H/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used. Additional Analyst Notes: - CVE Program Container: References: - https://arstechnica.com/information-technology/2022/06/vulnerabilities-in-meeting-owl-videoconference-device-imperil-100k-users/ - https://www.modzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf - https://resources.owllabs.com/blog
odzero.com/static/meetingowl/Meeting_Owl_Pro_Security_Disclosure_Report_RELEASE.pdf - https://resources.owllabs.com/blog/owl-labs-update
CVE ID: CVE-2022-31464 State: PUBLISHED Published: 2022-06-16T18:20:43 Last Updated: 2024-08-03T07:19:05.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions configuration in Adaware Protect v1.2.439.4251 allows attackers to escalate privileges via changing the service binary path. Additional Analyst Notes: - CVE Program Container: References: - https://www.adaware.com/ - https://r0h1rr1m.medium.com/adaware-protect-local-privilege-escalation-through-insecure-service-permissions-44d0eeb6c933
CVE ID: CVE-2022-31465 State: PUBLISHED Published: 2022-06-14T09:21:56.000Z Last Updated: 2025-04-21T13:53:02.256Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Xpedition Designer VX.2.10, Xpedition Designer VX.2.11, Xpedition Designer VX.2.12, Xpedition Designer VX.2.13 Problem Types: CWE-732 Description: A vulnerability has been identified in Xpedition Designer VX.2.10 (All versions < VX.2.10 Update 13), Xpedition Designer VX.2.11 (All versions < VX.2.11 Update 11), Xpedition Designer VX.2.12 (All versions < VX.2.12 Update 5), Xpedition Designer VX.2.13 (All versions < VX.2.13 Update 1). The affected application assigns impr
< VX.2.12 Update 5), Xpedition Designer VX.2.13 (All versions < VX.2.13 Update 1). The affected application assigns improper access rights to the service executable. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-988345.pdf
CVE ID: CVE-2022-31466 State: PUBLISHED Published: 2022-05-23T18:19:30 Last Updated: 2024-08-03T07:19:05.682Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when the action of quarantining or cleaning is performed, and using the time to replace the malicious file by a symlink. Additional Analyst Notes: - CVE Program Contain
erformed, and using the time to replace the malicious file by a symlink. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresec001.wordpress.com/2022/05/13/privilege-escalation-vulnerability-in-quick-heal-total-security/
CVE ID: CVE-2022-31467 State: PUBLISHED Published: 2022-05-23T18:19:17 Last Updated: 2024-08-03T07:19:05.695Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature of the DLLs it tries to load. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresec001.wordpress.com/2022/05/13/dll-hijack-vulnerab
nalyst Notes: - CVE Program Container: References: - https://softwaresec001.wordpress.com/2022/05/13/dll-hijack-vulnerability-fixed-in-quick-heal-total-security/
CVE ID: CVE-2022-31468 State: PUBLISHED Published: 2022-10-24T17:46:00.000Z Last Updated: 2025-05-09T16:38:14.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/168242/OX-App-Suite-Cross-Site-Scripting-Command-Injection.html
CVE ID: CVE-2022-31469 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T14:11:39.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.6 allows XSS via a deep link, as demonstrated by class="deep-link-app" for a /#!!&app=%2e./ URI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2022/Nov/18
CVE ID: CVE-2022-31470 State: PUBLISHED Published: 2022-06-07T00:00:00 Last Updated: 2024-08-03T07:19:05.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session (for a logged-in user), can access and retrieve mailbox content. Additional Analyst Notes: - CVE Program Container: References: - https://axigen.com - https://www.axigen.com/knowledgebase/Axigen-Mobile-WebMail-XSS-Vulnerability-CVE-2022-31470-_390.html - http://packetstormsecurity.com/files/1
/knowledgebase/Axigen-Mobile-WebMail-XSS-Vulnerability-CVE-2022-31470-_390.html - http://packetstormsecurity.com/files/174551/Axigen-10.5.0-4370c946-Cross-Site-Scripting.html
CVE ID: CVE-2022-31471 State: PUBLISHED Published: 2022-07-26T05:10:27 Last Updated: 2024-08-03T07:19:06.083Z Vendors: Christian Stefanescu Products: untangle Problem Types: Improper Restriction of XML External Entity Reference (XXE) Description: untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/stchris/untangle - https://github.com/stchris/untangle/releases/tag/1.2.1 - https://jvn.jp/en/jp/JVN304547
://github.com/stchris/untangle - https://github.com/stchris/untangle/releases/tag/1.2.1 - https://jvn.jp/en/jp/JVN30454777/
CVE ID: CVE-2022-31472 State: PUBLISHED Published: 2022-07-11T00:40:25 Last Updated: 2024-08-03T07:19:06.152Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Access Control Description: Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to obtain the data of Cabinet. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007429.html - https://jvn.jp/en/jp/JVN73897863/index.html
CVE ID: CVE-2022-31473 State: PUBLISHED Published: 2022-08-04T17:45:54.843905Z Last Updated: 2024-09-17T03:44:13.790Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: F5 Products: BIG-IP APM Problem Types: CWE-22 Description: In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst
ndary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K34893234
CVE ID: CVE-2022-31474 State: PUBLISHED Published: 2023-03-13T13:21:10.259Z Last Updated: 2025-01-08T22:08:42.496Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: iThemes Products: BackupBuddy Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from 8.5.8.0 through 8.7.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/backupbuddy/wordpress-backup-buddy-plugin-8-5-8-0-8-7-4-1-unauthenticated-path-traversal-arbitrary-file-
e/vulnerability/backupbuddy/wordpress-backup-buddy-plugin-8-5-8-0-8-7-4-1-unauthenticated-path-traversal-arbitrary-file-download-vulnerability?_s_id=cve - https://ithemes.com/blog/wordpress-vulnerability-report-special-edition-september-6-2022-backupbuddy/
CVE ID: CVE-2022-31475 State: PUBLISHED Published: 2022-07-21T17:24:56.586Z Last Updated: 2025-02-20T20:16:51.827Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N) Vendors: GiveWP Products: GiveWP (WordPress plugin) Problem Types: Arbitrary File Read Description: Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/give/#developers - https://patchstack.com/database/vulnerability/give/wordpress-givewp-plugin-2-20-2-authenticated-arbitrary-file-read-via-export-functio
tack.com/database/vulnerability/give/wordpress-givewp-plugin-2-20-2-authenticated-arbitrary-file-read-via-export-function-vulnerability
CVE ID: CVE-2022-31476 State: PUBLISHED Published: 2023-02-16T20:00:13.800Z Last Updated: 2025-01-27T18:17:40.713Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) SUR software Problem Types: denial of service Description: Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html
CVE ID: CVE-2022-31477 State: PUBLISHED Published: 2023-05-10T13:16:49.406Z Last Updated: 2025-01-27T18:08:25.600Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) NUC BIOS firmware Problem Types: information disclosure, CWE-665 Description: Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html
CVE ID: CVE-2022-31478 State: PUBLISHED Published: 2022-06-21T13:36:52 Last Updated: 2024-08-03T07:19:05.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/srsolutionsag/UserTakeOver - https://medium.com/%40bcksec/ilias-lms-usertakeover-4-0-1-vulnerability-b2824679403
CVE ID: CVE-2022-31479 State: PUBLISHED Published: 2022-06-06T16:36:46.116844Z Last Updated: 2024-09-16T22:30:23.730Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: LenelS2, HID Mercury Products: LNL-X2210, LNL-X2220, LNL-X3300, LNL-X4420, LNL-4420, S2-LP-1501, S2-LP-1502, S2-LP-2500, S2-LP-4502, LP1501, LP1502, LP2500, LP4502, EP4502 Problem Types: CWE-693 Description: An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP450
is vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable. The injected commands only get executed during start up or when unsafe calls regarding the hostname are used. This allows the attacker to gain remote access to the device and can make their persistence permanent by modifying the filesystem. Additional Analyst Notes: - CVE Program
the device and can make their persistence permanent by modifying the filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://www.corporate.carrier.com/product-security/advisories-resources/
CVE ID: CVE-2022-31480 State: PUBLISHED Published: 2022-06-06T16:37:36.175759Z Last Updated: 2024-09-17T01:55:48.654Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: LenelS2, HID Mercury Products: LNL-X2210, LNL-X2220, LNL-X3300, LNL-X4420, LNL-4420, S2-LP-1501, S2-LP-1502, S2-LP-2500, S2-LP-4502, LP1501, LP1502, LP2500, LP4502, EP4502 Problem Types: CWE-425 Description: An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service (DoS). This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions pr
sed on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The attacker needs to have a properly signed and encrypted binary, loading the firmware to the device ultimately triggers a reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.corporate.carrier.com/product-security/advisories-resources/
CVE ID: CVE-2022-31481 State: PUBLISHED Published: 2022-06-06T16:38:51.453086Z Last Updated: 2024-09-16T16:12:27.210Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: LenelS2, HID Mercury Products: LNL-X2210, LNL-X2220, LNL-X3300, LNL-X4420, LNL-4420, S2-LP-1501, S2-LP-1502, S2-LP-2500, S2-LP-4502, LP1501, LP1502, LP2500, LP4502, EP4502 Problem Types: CWE-120 Description: An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the L
elligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The overflowed data can allow the attacker to manipulate the “normal” code execution to that of their choosing. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable. Additional Analyst Notes: - CVE Program Container: References: - https://www.corporate.carrier.com/product-security/advisories-resources/
CVE ID: CVE-2022-31482 State: PUBLISHED Published: 2022-06-06T16:39:22.500510Z Last Updated: 2024-09-17T01:00:48.176Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: LenelS2, HID Mercury Products: LNL-X2210, LNL-X2220, LNL-X3300, LNL-X4420, LNL-4420, S2-LP-1501, S2-LP-1502, S2-LP-2500, S2-LP-4502, LP1501, LP1502, LP2500, LP4502, EP4502 Problem Types: CWE-120 Description: An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1
ID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The overflowed data leads to segmentation fault and ultimately a denial-of-service condition, causing the device to reboot. The impact of this vulnerability is that an unauthenticated attacker could leverage this flaw to cause the target device to become unresponsive. An attacker could automate this attack to achieve persistent DoS, effectively rendering the target controller useless. Additional Analyst Notes: - CVE Program Container: References: - https://www.corporate.carrier.com/product-security/advisories-resources/
CVE ID: CVE-2022-31483 State: PUBLISHED Published: 2022-06-06T16:39:56.305369Z Last Updated: 2024-09-16T18:55:31.907Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: LenelS2, HID Mercury Products: LNL-X2210, LNL-X2220, LNL-X3300, LNL-X4420, LNL-4420, S2-LP-1501, S2-LP-1502, S2-LP-2500, S2-LP-4502, LP1501, LP1502, LP2500, LP4502, EP4502 Problem Types: CWE-22 Description: An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the desired file anywhere on the filesystem. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which
rability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.271. This allows a malicious actor to overwrite sensitive system files and install a startup service to gain remote access to the underlaying Linux operating system with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.corporate.carrier.com/product-security/advisories-resources/