Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2022-31484

Summary
Assigner-Carrier
Assigner Org ID-e24e6442-3ae1-4538-a7b8-7ac95586db8f
Published At-06 Jun, 2022 | 16:40
Updated At-17 Sep, 2024 | 01:37
Rejected At-
Credits

User Account Deletion Unauthenticated

An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The impact of this vulnerability is that an unauthenticated attacker could restrict access to the web interface to legitimate users and potentially requiring them to use the default user dip switch procedure to gain access back.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:Carrier
Assigner Org ID:e24e6442-3ae1-4538-a7b8-7ac95586db8f
Published At:06 Jun, 2022 | 16:40
Updated At:17 Sep, 2024 | 01:37
Rejected At:
▼CVE Numbering Authority (CNA)
User Account Deletion Unauthenticated

An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The impact of this vulnerability is that an unauthenticated attacker could restrict access to the web interface to legitimate users and potentially requiring them to use the default user dip switch procedure to gain access back.

Affected Products
Vendor
LenelS2
Product
LNL-X2210
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
LenelS2
Product
LNL-X2220
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
LenelS2
Product
LNL-X3300
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
LenelS2
Product
LNL-X4420
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
LenelS2
Product
LNL-4420
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
LenelS2
Product
S2-LP-1501
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
LenelS2
Product
S2-LP-1502
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
LenelS2
Product
S2-LP-2500
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
LenelS2
Product
S2-LP-4502
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
HID Mercury
Product
LP1501
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
HID Mercury
Product
LP1502
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
HID Mercury
Product
LP2500
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
HID Mercury
Product
LP4502
Versions
Affected
  • From ALL before 1.29 (custom)
Vendor
HID Mercury
Product
EP4502
Versions
Affected
  • From ALL before 1.29 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-425CWE-425 Direct Request (Forced Browsing)
Type: CWE
CWE ID: CWE-425
Description: CWE-425 Direct Request (Forced Browsing)
Metrics
VersionBase scoreBase severityVector
3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Update to the latest version of firmware

Configurations
Workarounds

Disable the controller's Web Server. When the controller is configured to disable web access, you cannot remotely login into the controller’s web page. 1. Login to controller web pages 2. Go to “Users” Tab 3. Near bottom of the Users page, check option to “Disable Web Server” 4. Then select “Submit” at the bottom of the page 5. Then select “Apply Settings” tab 6. And on that page, select button “Apply Settings, Reboot” The Controller will apply the new setting and reboot. Web login will be disabled until switch 1 is physically turned ON, on the controller.

Exploits
Credits
Sam Quinn @eAyeP and Steve Povolny @spovolny from Trellix Threat Labs
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.corporate.carrier.com/product-security/advisories-resources/
x_refsource_MISC
Hyperlink: https://www.corporate.carrier.com/product-security/advisories-resources/
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.corporate.carrier.com/product-security/advisories-resources/
x_refsource_MISC
x_transferred
Hyperlink: https://www.corporate.carrier.com/product-security/advisories-resources/
Resource:
x_refsource_MISC
x_transferred
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:productsecurity@carrier.com
Published At:06 Jun, 2022 | 17:15
Updated At:17 Jun, 2022 | 14:51

An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The impact of this vulnerability is that an unauthenticated attacker could restrict access to the web interface to legitimate users and potentially requiring them to use the default user dip switch procedure to gain access back.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Secondary3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary2.05.0MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
Type: Primary
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Type: Secondary
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Type: Primary
Version: 2.0
Base score: 5.0
Base severity: MEDIUM
Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P
CPE Matches
hidglobal
hidglobal
>>lp1501_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:hidglobal:lp1501_firmware:*:*:*:*:*:*:*:*
hidglobal
hidglobal
>>lp1501>>-
cpe:2.3:h:hidglobal:lp1501:-:*:*:*:*:*:*:*
hidglobal
hidglobal
>>lp1502_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:hidglobal:lp1502_firmware:*:*:*:*:*:*:*:*
hidglobal
hidglobal
>>lp1502>>-
cpe:2.3:h:hidglobal:lp1502:-:*:*:*:*:*:*:*
hidglobal
hidglobal
>>lp2500_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:hidglobal:lp2500_firmware:*:*:*:*:*:*:*:*
hidglobal
hidglobal
>>lp2500>>-
cpe:2.3:h:hidglobal:lp2500:-:*:*:*:*:*:*:*
hidglobal
hidglobal
>>lp4502_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:hidglobal:lp4502_firmware:*:*:*:*:*:*:*:*
hidglobal
hidglobal
>>lp4502>>-
cpe:2.3:h:hidglobal:lp4502:-:*:*:*:*:*:*:*
hidglobal
hidglobal
>>ep4502_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:hidglobal:ep4502_firmware:*:*:*:*:*:*:*:*
hidglobal
hidglobal
>>ep4502>>-
cpe:2.3:h:hidglobal:ep4502:-:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_lnl-4420_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:carrier:lenels2_lnl-4420_firmware:*:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_lnl-4420>>-
cpe:2.3:h:carrier:lenels2_lnl-4420:-:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_lnl-x2210_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:carrier:lenels2_lnl-x2210_firmware:*:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_lnl-x2210>>-
cpe:2.3:h:carrier:lenels2_lnl-x2210:-:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_lnl-x2220_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:carrier:lenels2_lnl-x2220_firmware:*:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_lnl-x2220>>-
cpe:2.3:h:carrier:lenels2_lnl-x2220:-:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_lnl-x3300_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:carrier:lenels2_lnl-x3300_firmware:*:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_lnl-x3300>>-
cpe:2.3:h:carrier:lenels2_lnl-x3300:-:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_lnl-x4420_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:carrier:lenels2_lnl-x4420_firmware:*:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_lnl-x4420>>-
cpe:2.3:h:carrier:lenels2_lnl-x4420:-:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_s2-lp-1501_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:carrier:lenels2_s2-lp-1501_firmware:*:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_s2-lp-1501>>-
cpe:2.3:h:carrier:lenels2_s2-lp-1501:-:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_s2-lp-1502_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:carrier:lenels2_s2-lp-1502_firmware:*:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_s2-lp-1502>>-
cpe:2.3:h:carrier:lenels2_s2-lp-1502:-:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_s2-lp-2500_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:carrier:lenels2_s2-lp-2500_firmware:*:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_s2-lp-2500>>-
cpe:2.3:h:carrier:lenels2_s2-lp-2500:-:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_s2-lp-4502_firmware>>Versions before 1.29(exclusive)
cpe:2.3:o:carrier:lenels2_s2-lp-4502_firmware:*:*:*:*:*:*:*:*
carrier
carrier
>>lenels2_s2-lp-4502>>-
cpe:2.3:h:carrier:lenels2_s2-lp-4502:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-425Primarynvd@nist.gov
CWE-425Secondaryproductsecurity@carrier.com
CWE ID: CWE-425
Type: Primary
Source: nvd@nist.gov
CWE ID: CWE-425
Type: Secondary
Source: productsecurity@carrier.com
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://www.corporate.carrier.com/product-security/advisories-resources/productsecurity@carrier.com
Vendor Advisory
Hyperlink: https://www.corporate.carrier.com/product-security/advisories-resources/
Source: productsecurity@carrier.com
Resource:
Vendor Advisory

Change History

0
Information is not available yet

Similar CVEs

6Records found
CVE-2022-31480
Matching Score-10
Assigner-Carrier Global Corporation
ShareView Details
Matching Score-10
Assigner-Carrier Global Corporation
CVSS Score-7.5||HIGH
EPSS-0.90% / 55.74%
||
7 Day CHG~0.00%
Published-06 Jun, 2022 | 16:37
Updated-17 Sep, 2024 | 01:55
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Unauthenticated Firmware Upload and Arbitrary Reboot

An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service (DoS). This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The attacker needs to have a properly signed and encrypted binary, loading the firmware to the device ultimately triggers a reboot.

Action-Not Available
Vendor-carrierhidglobalHID MercuryLenelS2
Product-lenels2_lnl-x2210lp2500_firmwareep4502lp2500lenels2_s2-lp-2500lenels2_lnl-x2220lenels2_s2-lp-4502_firmwarelenels2_s2-lp-4502lenels2_lnl-x4420lenels2_lnl-x3300lenels2_lnl-x3300_firmwarelenels2_s2-lp-1502ep4502_firmwarelenels2_s2-lp-1502_firmwarelenels2_lnl-4420lenels2_lnl-x2220_firmwarelenels2_lnl-x4420_firmwarelenels2_lnl-4420_firmwarelenels2_s2-lp-2500_firmwarelenels2_s2-lp-1501lp4502lp1501lenels2_s2-lp-1501_firmwarelp1502lenels2_lnl-x2210_firmwarelp1501_firmwarelp4502_firmwarelp1502_firmwareLP2500LNL-X2210S2-LP-1502LNL-4420LP1502S2-LP-2500S2-LP-4502EP4502LP4502LP1501S2-LP-1501LNL-X3300LNL-X4420LNL-X2220
CWE ID-CWE-425
Direct Request ('Forced Browsing')
CVE-2022-31482
Matching Score-8
Assigner-Carrier Global Corporation
ShareView Details
Matching Score-8
Assigner-Carrier Global Corporation
CVSS Score-7.5||HIGH
EPSS-0.97% / 58.27%
||
7 Day CHG~0.00%
Published-06 Jun, 2022 | 16:39
Updated-17 Sep, 2024 | 01:00
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Denial-of-Service via internal structure overflow

An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The overflowed data leads to segmentation fault and ultimately a denial-of-service condition, causing the device to reboot. The impact of this vulnerability is that an unauthenticated attacker could leverage this flaw to cause the target device to become unresponsive. An attacker could automate this attack to achieve persistent DoS, effectively rendering the target controller useless.

Action-Not Available
Vendor-carrierhidglobalHID MercuryLenelS2
Product-lenels2_lnl-x2210lp2500_firmwareep4502lp2500lenels2_s2-lp-2500lenels2_lnl-x2220lenels2_s2-lp-4502_firmwarelenels2_s2-lp-4502lenels2_lnl-x4420lenels2_lnl-x3300lenels2_lnl-x3300_firmwarelenels2_s2-lp-1502ep4502_firmwarelenels2_s2-lp-1502_firmwarelenels2_lnl-4420lenels2_lnl-x2220_firmwarelenels2_lnl-x4420_firmwarelenels2_lnl-4420_firmwarelenels2_s2-lp-2500_firmwarelenels2_s2-lp-1501lp4502lp1501lenels2_s2-lp-1501_firmwarelp1502lenels2_lnl-x2210_firmwarelp1501_firmwarelp4502_firmwarelp1502_firmwareLP2500LNL-X2210S2-LP-1502LNL-4420LP1502S2-LP-2500S2-LP-4502EP4502LP4502LP1501S2-LP-1501LNL-X3300LNL-X4420LNL-X2220
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2022-31485
Matching Score-6
Assigner-Carrier Global Corporation
ShareView Details
Matching Score-6
Assigner-Carrier Global Corporation
CVSS Score-5.3||MEDIUM
EPSS-0.77% / 51.92%
||
7 Day CHG~0.00%
Published-06 Jun, 2022 | 16:41
Updated-17 Sep, 2024 | 00:26
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Unauthenticated homepage note modification

An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29.

Action-Not Available
Vendor-carrierhidglobalHID MercuryLenelS2
Product-lenels2_lnl-x2210lp2500_firmwareep4502lp2500lenels2_s2-lp-2500lenels2_lnl-x2220lenels2_s2-lp-4502_firmwarelenels2_s2-lp-4502lenels2_lnl-x4420lenels2_lnl-x3300lenels2_lnl-x3300_firmwarelenels2_s2-lp-1502ep4502_firmwarelenels2_s2-lp-1502_firmwarelenels2_lnl-4420lenels2_lnl-x2220_firmwarelenels2_lnl-x4420_firmwarelenels2_lnl-4420_firmwarelenels2_s2-lp-2500_firmwarelenels2_s2-lp-1501lp4502lp1501lenels2_s2-lp-1501_firmwarelp1502lenels2_lnl-x2210_firmwarelp1501_firmwarelp4502_firmwarelp1502_firmwareLP2500LNL-X2210S2-LP-1502LNL-4420LP1502S2-LP-2500S2-LP-4502EP4502LP4502LP1501S2-LP-1501LNL-X3300LNL-X4420LNL-X2220
CWE ID-CWE-425
Direct Request ('Forced Browsing')
CVE-2019-6551
Matching Score-4
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
ShareView Details
Matching Score-4
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
CVSS Score-7.5||HIGH
EPSS-3.30% / 87.23%
||
7 Day CHG~0.00%
Published-28 Feb, 2019 | 21:00
Updated-16 Sep, 2024 | 19:40
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to cause a continual denial-of-service condition.

Action-Not Available
Vendor-pangea-commICS-CERT
Product-fax_ataPangea Communications Internet FAX ATA
CWE ID-CWE-288
Authentication Bypass Using an Alternate Path or Channel
CWE ID-CWE-425
Direct Request ('Forced Browsing')
CVE-2026-25679
Matching Score-4
Assigner-Go Project
ShareView Details
Matching Score-4
Assigner-Go Project
CVSS Score-7.5||HIGH
EPSS-0.73% / 50.36%
||
7 Day CHG+0.21%
Published-06 Mar, 2026 | 21:28
Updated-22 Jul, 2026 | 12:17
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Incorrect parsing of IPv6 host literals in net/url

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Action-Not Available
Vendor-Go standard libraryRed Hat, Inc.Go
Product-gonet/urlCryostat 4 on RHEL 9Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsRed Hat Connectivity Link 1Red Hat Quay 3.16Multicluster Engine for KubernetesRed Hat OpenShift Service Mesh 3.3Deployment Validation OperatorRed Hat OpenShift Service Mesh 3.0Red Hat OpenShift Service Mesh 2.6Red Hat Satellite 6.17 for RHEL 9Red Hat 3scale API Management Platform 2Red Hat OpenShift GitOpsRed Hat OpenShift Container Platform 4.12Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRed Hat Lightspeed (formerly Insights) for Runtimes 1.0Red Hat OpenShift on AWSLogging for Red Hat OpenShift 6.0Red Hat Web Terminal 1.15Red Hat OpenShift Cluster Manager CLIRHEM 1.1 for RHEL 9Custom Metric Autoscaler 2.19Red Hat OpenShift Container Platform 4.17Red Hat OpenShift Service Mesh 3.1Red Hat Advanced Cluster Security for Kubernetes 4.10Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportNode HealthCheck OperatorRed Hat Enterprise Linux 9Red Hat Satellite 6.18 for RHEL 9Red Hat Enterprise Linux 8Red Hat Quay 3.14Migration Toolkit for Applications 8RHEM 1.0 for RHEL 9Red Hat Migration Toolkit 1.8Power monitoring for Red Hat OpenShiftRed Hat OpenShift AI 2.25Logging for Red Hat OpenShift 6.2Red Hat Service Interconnect 2Red Hat OpenStack Platform 17.1 for RHEL 9OpenShift Developer Tools and ServicesRed Hat OpenStack Platform 16.2Red Hat Web Terminal 1.14DevWorkspace Operator 0.4Red Hat Satellite 6.19 for RHEL 9Red Hat Advanced Cluster Management for Kubernetes 2.15ExternalDNS OperatorRed Hat Enterprise Linux AI 3.3OpenShift PipelinesSecurity Profiles OperatorRed Hat Enterprise Linux 8.8 Telecommunications Update ServiceRed Hat Advanced Cluster Management for Kubernetes 2.14Red Hat Web Terminal 1.11Red Hat Trusted Artifact Signer 1.3RHEM 1.1 for RHEL 10Red Hat OpenShift Container Platform 4.13Red Hat Ansible Automation Platform 2.6 for RHEL 10Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceRed Hat Quay 3.15Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsmirror registry for Red Hat OpenShiftRed Hat Enterprise Linux 9.4 Extended Update SupportRed Hat AMQ ClientsNetwork Observability (NETOBSERV) 1.11.2Red Hat Web Terminal 1.12Fence Agents Remediation OperatorRed Hat OpenShift Container Platform 4.18Red Hat Satellite 6.16 for RHEL 8Red Hat Satellite 6.16 for RHEL 9Red Hat Quay 3.9Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRed Hat Service Interconnect 1OpenShift API for Data Protection 1.4Red Hat OpenShift Dev Spaces 3.27Red Hat Update Infrastructure 5Red Hat OpenShift Virtualization 4Red Hat OpenStack Services on OpenShift 18.0Red Hat OpenShift Container Platform 4.16Red Hat Hardened ImagesRed Hat OpenShift Container Platform 4Red Hat Developer Hub 1.8Red Hat Ansible Automation Platform 2.6 for RHEL 9Red Hat Openshift Data Foundation 4Zero Trust Workload Identity Manager - Tech PreviewRed Hat Quay 3Service Telemetry Framework 1.5Machine Deletion Remediation OperatorRed Hat OpenShift Container Platform 4.15Zero Trust Workload Identity ManagerRed Hat OpenShift Service Mesh 3.2Logging Subsystem for Red Hat OpenShift 6.4Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsstreams for Apache Kafka 3Compliance Operator 1Red Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat Quay 3.1External Secrets Operator for Red Hat OpenShiftcert-manager Operator for Red Hat OpenShiftRed Hat Enterprise Linux 7Gatekeeper 3Red Hat Enterprise Linux 10Red Hat Ansible Automation Platform 2.5 for RHEL 8Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat Ansible Automation Platform 2.5 for RHEL 9OpenShift Service Mesh 3Red Hat Ansible Automation Platform 2Red Hat build of Apache Camel - HawtIO 4OpenShift ServerlessRed Hat Quay 3.12Red Hat Developer Hub 1.9OpenShift LightspeedRed Hat Ansible Automation Platform 2.6Red Hat Advanced Cluster Security 4.9Multicluster Global Hub 1.5.6Red Hat OpenShift Builds 1.7.4Red Hat Satellite 6.18Red Hat Certification Program for Red Hat Enterprise Linux 9Red Hat Satellite 6Red Hat Edge Manager 1.1Red Hat Enterprise Linux 10.0 Extended Update SupportBuilds for Red Hat OpenShift 1.6.0Red Hat Web Terminal 1.13Red Hat OpenShift AI (RHOAI)Confidential Compute AttestationRed Hat Advanced Cluster Security 4.8OpenShift Service Mesh 2Multicluster Global Hub 1.3.4Multicluster Global Hub 1.6.2Red Hat OpenShift distributed tracing 3.9.1Logical Volume Manager StorageRed Hat Enterprise Linux 8.2 Advanced Update Supportmirror registry for Red Hat OpenShift 2.0Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnRed Hat OpenShift Container Platform 4.19Red Hat OpenShift Container Platform 4.14Logging Subsystem for Red Hat OpenShiftRed Hat Enterprise Linux 9.6 Extended Update SupportOpenShift API for Data Protection 1.5Red Hat OpenShift for Windows ContainersRed Hat OpenShift Container Platform 4.20Red Hat OpenStack Platform 17.1Assisted Installer for Red Hat OpenShift Container Platform 2Red Hat Edge Manager 1.0Multicluster Global Hub 1.4.5
CWE ID-CWE-1286
Improper Validation of Syntactic Correctness of Input
CWE ID-CWE-425
Direct Request ('Forced Browsing')
CVE-2017-14993
Matching Score-4
Assigner-MITRE Corporation
ShareView Details
Matching Score-4
Assigner-MITRE Corporation
CVSS Score-7.5||HIGH
EPSS-1.23% / 65.66%
||
7 Day CHG~0.00%
Published-20 Feb, 2018 | 23:00
Updated-05 Aug, 2024 | 19:42
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

OXID eShop Community Edition before 6.0.0 RC3 (development), 4.10.x before 4.10.6 (maintenance), and 4.9.x before 4.9.11 (legacy), Enterprise Edition before 6.0.0 RC3 (development), 5.2.x before 5.2.11 (legacy), and 5.3.x before 5.3.6 (maintenance), and Professional Edition before 6.0.0 RC3 (development), 4.9.x before 4.9.11 (legacy) and 4.10.x before 4.10.6 (maintenance) allow remote attackers to crawl specially crafted URLs (aka "forced browsing") in order to overflow the database of the shop and consequently make it stop working. Prerequisite: the shop allows rendering empty categories to the storefront via an admin option.

Action-Not Available
Vendor-oxid-esalesn/a
Product-eshopn/a
CWE ID-CWE-425
Direct Request ('Forced Browsing')
Details not found