CVE:CVE-2022-31479
CNNVD:CNNVD-202206-426
Carrier LenelS2 HID Mercury access panels是美国Carrier公司的一个控制器面板。
Carrier LenelS2 HID Mercury access panels 存在安全漏洞，该漏洞源于安全措施实施不充分。远程攻击者可以使用特制名称更新主机名，导致执行任意shell命令。
solution:Upgrade hidglobal lp1501_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade hidglobal lp1502_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade hidglobal lp2500_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade hidglobal lp4502_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade hidglobal ep4502_firmware to a higher version than 1.296,and avoid the version (,1.296); Upgrade carrier lenels2_lnl-4420_firmware to a higher version than 1.296,and avoid the version (,1.296); Upgrade carrier lenels2_lnl-x2210_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_lnl-x2220_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_lnl-x3300_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_lnl-x4420_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_s2-lp-1501_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_s2-lp-1502_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_s2-lp-2500_firmware to a higher version than 1.302,and avoid the version (,1.302); Upgrade carrier lenels2_s2-lp-4502_firmware to a higher version than 1.302,and avoid the version (,1.302)