Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: HID Mercury EP4502, LP1501 and 3 more products 1.29 Clear all filters
TI-2022-13411 CVE-2022-31485 · GHSA-f4gf-wv2j-p66r

Unauthenticated homepage note modification

Priority LOW 26

An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00847 Published 2022-06-06 Fixed in 1.29 CWE-425
TI-2022-13410 CVE-2022-31484 · GHSA-fp3x-39wm-gj8f

User Account Deletion Unauthenticated

Priority LOW 35

An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01065 Published 2022-06-06 Fixed in 1.29 CWE-425
TI-2022-13408 CVE-2022-31482 · GHSA-4qf2-7m52-qfp8

Denial-of-Service via internal structure overflow

Priority LOW 35

An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01064 Published 2022-06-06 Fixed in 1.29 CWE-120