Cyber Resilience

CVE-2022-31484

High

Published: 06 June 2022

Published
06 June 2022
Modified
21 November 2024
KEV Added
Patch
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0045 64.0th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-31484 is a high-severity Forced Browsing (CWE-425) vulnerability in Hidglobal Lp1501 Firmware. Its CVSS base score is 7.5 (High).

Operationally, ranked in the top 36.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to…

more

1.29. The impact of this vulnerability is that an unauthenticated attacker could restrict access to the web interface to legitimate users and potentially requiring them to use the default user dip switch procedure to gain access back.

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

hidglobal
lp1501 firmware
≤ 1.29
hidglobal
lp1502 firmware
≤ 1.29
hidglobal
lp2500 firmware
≤ 1.29
hidglobal
lp4502 firmware
≤ 1.29
hidglobal
ep4502 firmware
≤ 1.29
carrier
lenels2 lnl-4420 firmware
≤ 1.29
carrier
lenels2 lnl-x2210 firmware
≤ 1.29
carrier
lenels2 lnl-x2220 firmware
≤ 1.29
carrier
lenels2 lnl-x3300 firmware
≤ 1.29
carrier
lenels2 lnl-x4420 firmware
≤ 1.29
+4 more product configuration(s) — see NVD for full list

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-425

Forcing a decision on every access request, including direct ones, reduces the exploitability of forced browsing by ensuring no unchecked access paths.

addresses: CWE-425

Forces all accesses through the reference monitor, preventing direct or forced requests that bypass checks.

addresses: CWE-425

Enforcing access for all logical requests prevents unauthorized direct access to protected resources.

addresses: CWE-425

Displaying the notification before further access on public systems prevents direct resource requests from bypassing the required system use terms and consent.

addresses: CWE-425

Decoy endpoints catch forced browsing and direct requests, deflecting attackers from legitimate resources while enabling analysis.

addresses: CWE-425

Blocks unauthorized direct requests or forced browsing by denying input access to non-authorized actors.

References