CVE:CVE-2022-31483
CNNVD:CNNVD-202206-428
Carrier LenelS2 HID Mercury access panels是美国Carrier公司的一个控制器面板。
Carrier LenelS2 HID Mercury access panels 存在路径遍历漏洞，该漏洞源于处理目录遍历序列时存在输入验证错误问题。具有管理员权限的远程攻击者可以发送特制的 HTTP 请求，可以将任意文件上传到系统的任意位置。
solution:Upgrade hidglobal lp1501_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade hidglobal lp1502_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade hidglobal lp2500_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade hidglobal lp4502_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade hidglobal ep4502_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade carrier lenels2_lnl-4420_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade carrier lenels2_lnl-x2210_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade carrier lenels2_lnl-x2220_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade carrier lenels2_lnl-x3300_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade carrier lenels2_lnl-x4420_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade carrier lenels2_s2-lp-1501_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade carrier lenels2_s2-lp-1502_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade carrier lenels2_s2-lp-2500_firmware to a higher version than 1.271,and avoid the version (,1.271); Upgrade carrier lenels2_s2-lp-4502_firmware to a higher version than 1.271,and avoid the version (,1.271)