CVE:CVE-2022-31486
CNNVD:CNNVD-202206-440
Carrier LenelS2 HID Mercury access panels是美国Carrier公司的一个控制器面板。
Carrier LenelS2 HID Mercury access panels 存在操作系统命令注入漏洞，该漏洞源于输入验证不当。远程用户可以将特制数据传递给应用程序并在目标系统上执行任意操作系统命令。
solution:Upgrade hidglobal lp1501_firmware to a higher version than 1.303,and avoid the version (,1.303); Upgrade hidglobal lp1502_firmware to a higher version than 1.303,and avoid the version (,1.303); Upgrade hidglobal lp2500_firmware to a higher version than 1.303,and avoid the version (,1.303); Upgrade hidglobal lp4502_firmware to a higher version than 1.303,and avoid the version (,1.303); Upgrade hidglobal ep4502_firmware to a higher version than 1.297,and avoid the version (,1.297); Upgrade carrier lenels2_lnl-4420_firmware to a higher version than 1.297,and avoid the version (,1.297); Upgrade carrier lenels2_lnl-x2210_firmware to a higher version than 1.303,and avoid the version (,1.303); Upgrade carrier lenels2_lnl-x2220_firmware to a higher version than 1.303,and avoid the version (,1.303); Upgrade carrier lenels2_lnl-x3300_firmware to a higher version than 1.303,and avoid the version (,1.303); Upgrade carrier lenels2_lnl-x4420_firmware to a higher version than 1.303,and avoid the version (,1.303); Upgrade carrier lenels2_s2-lp-1501_firmware to a higher version than 1.303,and avoid the version (,1.303); Upgrade carrier lenels2_s2-lp-1502_firmware to a higher version than 1.303,and avoid the version (,1.303); Upgrade carrier lenels2_s2-lp-2500_firmware to a higher version than 1.303,and avoid the version (,1.303); Upgrade carrier lenels2_s2-lp-4502_firmware to a higher version than 1.303,and avoid the version (,1.303)