CVE-2022-31484

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The impact of this vulnerability is that an unauthenticated attacker could restrict access to the web interface to legitimate users and potentially requiring them to use the default user dip switch procedure to gain access back.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-425

Affected software

No affected versions have been published.

Timeline

Published: Jun 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-314855.3An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This v CVE-2022-314868.8An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands. This vulnera CVE-2022-314877.5Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chart_content/master.php symbol SQL inj CVE-2022-314887.5Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency SQL injection.CVE-2022-314897.5Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL injection.CVE-2022-31496.1The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when creating and editing cursors, which could allow a CVE-2022-3149110.0Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote at CVE-2022-314926.1Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Username.CVE-2022-314936.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS.CVE-2022-314946.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.CVE-2022-314956.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.CVE-2022-314968.8LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.