CVE:CVE-2022-31480
CNNVD:CNNVD-202206-424
Carrier LenelS2 HID Mercury access panels是美国Carrier公司的一个控制器面板。
Carrier LenelS2 HID Mercury access panels 存在安全漏洞，该漏洞源于受影响的应用程序没有对所有受限 URL、脚本或文件充分实施适当的授权。远程攻击者可以将任意固件文件上传到目标设备并导致系统出现拒绝服务。
solution:Upgrade hidglobal lp1501_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade hidglobal lp1502_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade hidglobal lp2500_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade hidglobal lp4502_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade hidglobal ep4502_firmware to a higher version than 1.296,and avoid the version (,1.296); Upgrade carrier lenels2_lnl-4420_firmware to a higher version than 1.296,and avoid the version (,1.296); Upgrade carrier lenels2_lnl-x2210_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_lnl-x2220_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_lnl-x3300_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_lnl-x4420_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_s2-lp-1501_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_s2-lp-1502_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_s2-lp-2500_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_s2-lp-4502_firmware to a higher version than 1.302,and avoid the version (,1.302)