Known vulnerabilities in S2-LP-4502
Vendor:
Carrier
Software:
S2-LP-4502
Software CPE:
cpe:2.3:h:carrier:s2-lp-4502:*:*:*:*:*:*:*:*
Website:
https://www.carrier.com/
Total vulnerabilities:
8
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU63974 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-31486 |
CWE-78 | Medium | 1.303 | 03.06.2022 |
SB2022060321 |
||
| #VU63973 - Direct Request ('Forced Browsing') CVE-2022-31485 |
CWE-425 | Medium | 1.29 | 03.06.2022 |
SB2022060320 |
||
| #VU63972 - Direct Request ('Forced Browsing') CVE-2022-31484 |
CWE-425 | Medium | 1.29 | 03.06.2022 |
SB2022060320 |
||
| #VU63971 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-31483 |
CWE-22 | Low | 1.271 | 03.06.2022 |
SB2022060319 |
||
| #VU63969 - Memory corruption CVE-2022-31482 |
CWE-119 | Medium | 1.29 | 03.06.2022 |
SB2022060320 |
||
| #VU63968 - Memory corruption CVE-2022-31481 |
CWE-119 | High | 1.302 | 03.06.2022 |
SB2022060318 |
||
| #VU63967 - Direct Request ('Forced Browsing') CVE-2022-31480 |
CWE-425 | Medium | 1.302 | 03.06.2022 |
SB2022060318 |
||
| #VU63965 - Protection Mechanism Failure CVE-2022-31479 |
CWE-693 | High | 1.302 | 03.06.2022 |
SB2022060318 |