Critical · published June 6, 2022
🚨 An unauthenticated attacker can wreak havoc simply by sending a crafted update file to vulnerable devices! 🔥 Think of it like a sneaky hacker sneaking in a fake delivery to a smart home device, tricking it into executing their commands — an alarming twist on what should be a routine update! With this vulnerability, an attacker could monitor all communications and even modify the device's configurations at will. Imagine them flipping relays or causing the device to misbehave and crash, leaving your systems vulnerable and at risk!
Think of it like a sneaky hacker sneaking in a fake delivery to a smart home device, tricking it into executing their commands — an alarming twist on what should be a routine update! This buffer overflow vulnerability affects HID Mercury Intelligent Controllers (LP1501, LP1502, LP2500, LP4502, and EP4502) with firmware versions prior to 1.302 and 1.296 for the respective LP and EP series. By sending a specially crafted update file, attackers can manipulate the normal execution code of the device.
With this vulnerability, an attacker could monitor all communications and even modify the device's configurations at will. Imagine them flipping relays or causing the device to misbehave and crash, leaving your systems vulnerable and at risk! To protect your systems, immediately patch the firmware to version 1.302 or later for the LP series and 1.296 or later for the EP series. Regularly review your device's firmware and ensure you only accept updates from trusted sources. You've got this! Stay proactive and secure your devices to keep your systems safe from sneaky intrusions! 🛡️