Advisories · Technology

LenelS2 S2-LP-1502.

Every CVE that names LenelS2 S2-LP-1502 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-31486 CVE record

CVSS 8.8 High

Command injection via Advanced Networking route add functionality
- LenelS2 LNL-X2210
- LenelS2 LNL-X2220
- Command injection
Not analysed yet 6 Jun 2022
CVE-2022-31485 CVE record

CVSS 5.3 Medium

Unauthenticated homepage note modification
- LenelS2 LNL-X2210
- LenelS2 LNL-X2220
- Broken access control
Not analysed yet 6 Jun 2022
CVE-2022-31484 CVE record

CVSS 7.5 High

User Account Deletion Unauthenticated
- LenelS2 LNL-X2210
- LenelS2 LNL-X2220
- Broken access control
Not analysed yet 6 Jun 2022
CVE-2022-31483 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Arbitrary file write via authenticated OSDP file upload
- LenelS2 LNL-X2210
- LenelS2 LNL-X2220
- Path traversal
Not analysed yet 6 Jun 2022
CVE-2022-31482 CVE record

CVSS 7.5 High

Denial-of-Service via internal structure overflow
- LenelS2 LNL-X2210
- LenelS2 LNL-X2220
- Memory corruption
Not analysed yet 6 Jun 2022
CVE-2022-31481 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Remote Code Execution via buffer overflow in firmware update process
- LenelS2 LNL-X2210
- LenelS2 LNL-X2220
- Memory corruption
Not analysed yet 6 Jun 2022
CVE-2022-31480 CVE record

CVSS 7.5 High

Unauthenticated Firmware Upload and Arbitrary Reboot
- LenelS2 LNL-X2210
- LenelS2 LNL-X2220
- Broken access control
Not analysed yet 6 Jun 2022
CVE-2022-31479 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Remote Code Execution via command injection of the hostname
- LenelS2 LNL-X2210
- LenelS2 LNL-X2220
- CWE-693
Not analysed yet 6 Jun 2022