Buffer overflow in Carrier Lenels2 Lnl-4420
CVE-2022-31482
An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The overflowed data leads to segmentation fault and ultimately a denial-of-service condition, causing the device to reboot. The impact of this vulnerability is that an unauthenticated attacker could leverage this flaw to cause the target device to become unresponsive. An attacker could automate this attack to achieve persistent DoS, effectively rendering the target controller useless.
Vulnerability class: Buffer Overflow
EPSS: 0.010 (58.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
Weakness classification (CWE)
References
- productsecurity@carrier.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-31482?
- CVE-2022-31482 is a high-severity vulnerability in Carrier Lenels2 Lnl-4420, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.5/10. Published 2022-06-06.
- How severe is CVE-2022-31482?
- High severity. CVSS v3 base score is 7.5 out of 10.