CVE-2022-31486

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2022
Source publication: Jun 6, 2022
Source updated: Sep 16, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Command injection via Advanced Networking route add functionality

An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.303 for the LP series and 1.297 for the EP series. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

LNL-X2210

Vendor: LenelS2
Product: LNL-X2210
Platforms: Unknown
Default status: Unknown

LNL-X2210 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.303	Unavailable	None listed

LNL-X2220

Vendor: LenelS2
Product: LNL-X2220
Platforms: Unknown
Default status: Unknown

LNL-X2220 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.303	Unavailable	None listed

LNL-X3300

Vendor: LenelS2
Product: LNL-X3300
Platforms: Unknown
Default status: Unknown

LNL-X3300 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.303	Unavailable	None listed

LNL-X4420

Vendor: LenelS2
Product: LNL-X4420
Platforms: Unknown
Default status: Unknown

LNL-X4420 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.303	Unavailable	None listed

LNL-4420

Vendor: LenelS2
Product: LNL-4420
Platforms: Unknown
Default status: Unknown

LNL-4420 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.297	Unavailable	None listed

S2-LP-1501

Vendor: LenelS2
Product: S2-LP-1501
Platforms: Unknown
Default status: Unknown

S2-LP-1501 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.303	Unavailable	None listed

S2-LP-1502

Vendor: LenelS2
Product: S2-LP-1502
Platforms: Unknown
Default status: Unknown

S2-LP-1502 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.303	Unavailable	None listed

S2-LP-2500

Vendor: LenelS2
Product: S2-LP-2500
Platforms: Unknown
Default status: Unknown

S2-LP-2500 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.303	Unavailable	None listed

S2-LP-4502

Vendor: LenelS2
Product: S2-LP-4502
Platforms: Unknown
Default status: Unknown

S2-LP-4502 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.303	Unavailable	None listed

LP1501

Vendor: HID Mercury
Product: LP1501
Platforms: Unknown
Default status: Unknown

LP1501 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.303	Unavailable	None listed

LP1502

Vendor: HID Mercury
Product: LP1502
Platforms: Unknown
Default status: Unknown

LP1502 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.303	Unavailable	None listed

LP2500

Vendor: HID Mercury
Product: LP2500
Platforms: Unknown
Default status: Unknown

LP2500 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.303	Unavailable	None listed

LP4502

Vendor: HID Mercury
Product: LP4502
Platforms: Unknown
Default status: Unknown

LP4502 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.303	Unavailable	None listed

EP4502

Vendor: HID Mercury
Product: EP4502
Platforms: Unknown
Default status: Unknown

EP4502 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ALL	`affected`	custom	1.297	Unavailable	None listed