CVE:CVE-2022-31485
CNNVD:CNNVD-202206-429
Carrier LenelS2 HID Mercury access panels是美国Carrier公司的一个控制器面板。
Carrier LenelS2 HID Mercury access panels 存在安全漏洞，该漏洞源于受影响的应用程序没有对所有受限 URL、脚本或文件充分实施适当的授权。远程攻击者可以发送特制数据包来更新 Web 界面主页上的 notes 部分。
solution:Upgrade hidglobal lp1501_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade hidglobal lp1502_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade hidglobal lp2500_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade hidglobal lp4502_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade hidglobal ep4502_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade carrier lenels2_lnl-4420_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade carrier lenels2_lnl-x2210_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade carrier lenels2_lnl-x2220_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade carrier lenels2_lnl-x3300_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade carrier lenels2_lnl-x4420_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade carrier lenels2_s2-lp-1501_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade carrier lenels2_s2-lp-1502_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade carrier lenels2_s2-lp-2500_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade carrier lenels2_s2-lp-4502_firmware to a higher version than 1.29,and avoid the version (,1.29)