CVE-2022-31483

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the desired file anywhere on the filesystem. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.271. This allows a malicious actor to overwrite sensitive system files and install a startup service to gain remote access to the underlaying Linux operating system with root privileges.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Jun 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-314847.5An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts CVE-2022-314855.3An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This v CVE-2022-314868.8An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands. This vulnera CVE-2022-314877.5Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chart_content/master.php symbol SQL inj CVE-2022-314887.5Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency SQL injection.CVE-2022-314897.5Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL injection.CVE-2022-31496.1The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when creating and editing cursors, which could allow a CVE-2022-3149110.0Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote at CVE-2022-314926.1Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Username.CVE-2022-314936.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS.CVE-2022-314946.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.CVE-2022-314956.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.