HID Global's vulnerability footprint centers on a focused line of physical access control and credential management devices, including card readers and printers such as the EP4502 and LP1500-series, that secure building and data-center entry points. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity, and recur through weakness classes including forced browsing, buffer overflows, OS command injection, missing authorization checks, and cleartext credential storage—patterns endemic to embedded authentication and control hardware. Defenders should prioritize patching these devices, especially internet-exposed or networked units, and review physical access policies around affected product lines; live severity and current exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Hidglobal over time
Signals from CVEs in this vendor scope (17 CVEs).
17 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-31479CRITICAL An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process. This vulnera | Jun 6, 2022 | 9.8 | 32 | NO | NO |
CVE-2022-31486HIGH An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mer | Jun 6, 2022 | 8.8 | 27 | NO | NO |
CVE-2022-31483HIGH An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the desired file anywhere on the filesystem. This vulnerability | Jun 6, 2022 | 8.8 | 27 | NO | NO |
CVE-2020-36283HIGH HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode). By persuading an authenticated user to visit a malicious Web s | Mar 24, 2021 | 8.8 | 26 | NO | NO |
CVE-2022-31481CRITICAL An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent | Jun 6, 2022 | 10.0 | 25 | NO | NO |
CVE-2023-2904HIGH The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within web fields in the application programmable interface (API). An | Jun 7, 2023 | 7.3 | 24 | NO | NO |
CVE-2022-31484HIGH An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on HID Mercury Intelligen | Jun 6, 2022 | 7.5 | 24 | NO | NO |
CVE-2022-31482HIGH An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mer | Jun 6, 2022 | 7.5 | 24 | NO | NO |
CVE-2022-31480HIGH An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service (DoS). This vulnerability impacts products based on | Jun 6, 2022 | 7.5 | 24 | NO | NO |
CVE-2018-17492HIGH EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application. | Mar 21, 2019 | 7.8 | 23 | NO | NO |
Signals from CVEs in this vendor scope (17 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Hidglobal.
Media articles that mention a CVE ID that affects a product developed by Hidglobal — matched by CVE ID, not by vendor name.