CVE-2022-31485CWE-425

Unauthenticated homepage note modification

Medium · published June 6, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00834 · 57.2th percentile
Weakness
CWE-425 · Direct Request ('Forced Browsing')
Published
2022-06-06T16:41Z
EPSS history
Timeline
  • 06 JUN 16:41Z
    Unauthenticated homepage note modification
    cvelistv5