hidglobal records

17 published records for vendor hidglobal.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

17 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2022-31479No exploit	Remote Code Execution via command injection of the hostnamehidglobal · lp1501 firmware · CWE-693 pre-auth RCE Command injection	Critical9.8	—	2.4%	Jun 6, 2022
40Plan	CVE-2022-31481No exploit	Remote Code Execution via buffer overflow in firmware update processhidglobal · lp1501 firmware · CWE-120 pre-auth RCE Memory safety	Critical10.0	—	1.6%	Jun 6, 2022
36Monitor	CVE-2022-31483No exploit	Arbitrary file write via authenticated OSDP file uploadhidglobal · lp1501 firmware · CWE-22 Path traversal	High8.8	—	1.8%	Jun 6, 2022
35Monitor	CVE-2022-31486No exploit	Command injection via Advanced Networking route add functionalityhidglobal · lp1501 firmware · CWE-78 RCE Command injection	High8.8	—	1.4%	Jun 6, 2022
35Monitor	CVE-2020-36283No exploit	HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode).hidglobal · omnikey 5427 firmware · CWE-352 Pre-auth XSS CSRF	High8.8	—	0.7%	Mar 24, 2021
31Monitor	CVE-2018-17491No exploit	EasyLobby Solo could allow a local attacker to gain elevated privileges on the system.hidglobal · easylobby solo · CWE-862 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.3%	Mar 21, 2019
31Monitor	CVE-2018-17492No exploit	EasyLobby Solo contains default administrative credentials.hidglobal · easylobby solo · CWE-798 Hard-coded credentials	High7.8	—	0.3%	Mar 21, 2019
31Monitor	CVE-2024-22388No exploit	Insecure Default Initialization of Resource in HID Globalhidglobal · iclass se cp1000 encoder firmware · CWE-1188	High7.8	—	0.1%	Feb 6, 2024
30Monitor	CVE-2022-31484No exploit	User Account Deletion Unauthenticatedhidglobal · lp1501 firmware · CWE-425 Pre-auth Denial of service	High7.5	—	1.0%	Jun 6, 2022
30Monitor	CVE-2022-31482No exploit	Denial-of-Service via internal structure overflowhidglobal · lp1501 firmware · CWE-120 Pre-auth Memory safety Denial of service	High7.5	—	1.0%	Jun 6, 2022
30Monitor	CVE-2022-31480No exploit	Unauthenticated Firmware Upload and Arbitrary Reboothidglobal · lp1501 firmware · CWE-425 Pre-auth Denial of service	High7.5	—	0.9%	Jun 6, 2022
29Monitor	CVE-2023-2904No exploit	The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within web fields in the applhidglobal · safe · CWE-471	High7.3	—	0.5%	Jun 7, 2023
28Monitor	CVE-2018-17490No exploit	EasyLobby Solo is vulnerable to a denial of service.hidglobal · easylobby solo · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	Mar 21, 2019
23Monitor	CVE-2019-13603No exploit	An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework dhidglobal · digital persona u.are.u 4500 driver firmware · CWE-330 Pre-auth Weak crypto	Medium5.9	—	1.0%	Jul 16, 2019
22Monitor	CVE-2018-17489No exploit	EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintexhidglobal · easylobby solo · CWE-312	Medium5.5	—	0.2%	Mar 21, 2019
21Monitor	CVE-2022-31485No exploit	Unauthenticated homepage note modificationhidglobal · lp1501 firmware · CWE-425 Pre-auth	Medium5.3	—	0.8%	Jun 6, 2022
21Monitor	CVE-2024-23806No exploit	HID Global Reader Configuration Cards Improper Authorizationhidglobal · omnikey secure elements reader configuration cards firmware · CWE-285 Broken access control (IDOR)	Medium5.3	—	0.2%	Feb 7, 2024

CVE-2022-31479
40Plan
Remote Code Execution via command injection of the hostname
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
hidglobal · lp1501 firmwareJun 6, 2022
CVE-2022-31481
40Plan
Remote Code Execution via buffer overflow in firmware update process
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
- Memory safety
hidglobal · lp1501 firmwareJun 6, 2022
CVE-2022-31483
36Monitor
Arbitrary file write via authenticated OSDP file upload
HighCVSS 8.8No exploitEPSS 1%
- Path traversal
hidglobal · lp1501 firmwareJun 6, 2022
CVE-2022-31486
35Monitor
Command injection via Advanced Networking route add functionality
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
hidglobal · lp1501 firmwareJun 6, 2022
CVE-2020-36283
35Monitor
HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode).
HighCVSS 8.8No exploitEPSS 0%
hidglobal · omnikey 5427 firmwareMar 24, 2021
CVE-2018-17491
31Monitor
EasyLobby Solo could allow a local attacker to gain elevated privileges on the system.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
hidglobal · easylobby soloMar 21, 2019
CVE-2018-17492
31Monitor
EasyLobby Solo contains default administrative credentials.
HighCVSS 7.8No exploitEPSS 0%
- Hard-coded credentials
hidglobal · easylobby soloMar 21, 2019
CVE-2024-22388
31Monitor
Insecure Default Initialization of Resource in HID Global
HighCVSS 7.8No exploitEPSS 0%
hidglobal · iclass se cp1000 encoder firmwareFeb 6, 2024
CVE-2022-31484
30Monitor
User Account Deletion Unauthenticated
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
hidglobal · lp1501 firmwareJun 6, 2022
CVE-2022-31482
30Monitor
Denial-of-Service via internal structure overflow
HighCVSS 7.5No exploitEPSS 1%
hidglobal · lp1501 firmwareJun 6, 2022
CVE-2022-31480
30Monitor
Unauthenticated Firmware Upload and Arbitrary Reboot
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
hidglobal · lp1501 firmwareJun 6, 2022
CVE-2023-2904
29Monitor
The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within web fields in the appl
HighCVSS 7.3No exploitEPSS 0%
hidglobal · safeJun 7, 2023
CVE-2018-17490
28Monitor
EasyLobby Solo is vulnerable to a denial of service.
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
hidglobal · easylobby soloMar 21, 2019
CVE-2019-13603
23Monitor
An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework d
MediumCVSS 5.9No exploitEPSS 1%
- Pre-auth
- Weak crypto
hidglobal · digital persona u.are.u 4500 driver firmwareJul 16, 2019
CVE-2018-17489
22Monitor
EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintex
MediumCVSS 5.5No exploitEPSS 0%
hidglobal · easylobby soloMar 21, 2019
CVE-2022-31485
21Monitor
Unauthenticated homepage note modification
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
hidglobal · lp1501 firmwareJun 6, 2022
CVE-2024-23806
21Monitor
HID Global Reader Configuration Cards Improper Authorization
MediumCVSS 5.3No exploitEPSS 0%
- Broken access control (IDOR)
hidglobal · omnikey secure elements reader configuration cards firmwareFeb 7, 2024