← CVE Intelligence

CVE-2022-31483

Arbitrary file write via authenticated OSDP file upload PUBLISHED

Description (CNA)

An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the desired file anywhere on the filesystem. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.271. This allows a malicious actor to overwrite sensitive system files and install a startup service to gain remote access to the underlaying Linux operating system with root privileges.

Affected (CNA)

Vendor / productVersions
LenelS2 / LNL-X2210affected ALL before 1.271
LenelS2 / LNL-X2220affected ALL before 1.271
LenelS2 / LNL-X3300affected ALL before 1.271
LenelS2 / LNL-X4420affected ALL before 1.271
LenelS2 / LNL-4420affected ALL before 1.271
LenelS2 / S2-LP-1501affected ALL before 1.271
LenelS2 / S2-LP-1502affected ALL before 1.271
LenelS2 / S2-LP-2500affected ALL before 1.271
LenelS2 / S2-LP-4502affected ALL before 1.271
HID Mercury / LP1501affected ALL before 1.271
HID Mercury / LP1502affected ALL before 1.271
HID Mercury / LP2500affected ALL before 1.271
HID Mercury / LP4502affected ALL before 1.271
HID Mercury / EP4502affected ALL before 1.271

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.