What is CVE-2022-31481?

CVE-2022-31481 is a critical-severity vulnerability in Carrier Lenels2 Lnl-4420, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 10.0/10. Published 2022-06-06.

How severe is CVE-2022-31481?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Buffer overflow in Carrier Lenels2 Lnl-4420

CVE-2022-31481

An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The overflowed data can allow the attacker to manipulate the “normal” code execution to that of their choosing. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable.

Vulnerability class: Buffer Overflow

EPSS: 0.015 (71.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

productsecurity@carrier.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-31481?: CVE-2022-31481 is a critical-severity vulnerability in Carrier Lenels2 Lnl-4420, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 10.0/10. Published 2022-06-06.
How severe is CVE-2022-31481?: Critical severity. CVSS v3 base score is 10.0 out of 10.