Mercury Security has been informed of a firmware security issue affecting
the following hardware: LP1501, LP1502, LP2500, LP4502, and EP4502.
This issue makes it possible for a hacker to have a level of access to these
controllers. This is done through the Web Browser that accesses and
configures Mercury controllers.
Mercury has issued new firmware that addresses these issues, and they strongly recommend updating the firmware as soon as possible. You can access this firmware for download from Mercury directly or from Keri’s downloads page under the software & downloads section
Click here to view: Downloads
A Doors.NET software-specific option is to turn Web Browser access OFF in Doors.NET software.
LP Controllers Web Browser Information:
https://help.kerisys.com/portal/en/kb/articles/lp-controller-full-controller-configuration
EP-4502 Controller Web Browser Information:
https://help.kerisys.com/portal/en/kb/articles/mercury-ep-series-full-setup-and-configuration-guide
Keri would like to emphasize that this security issue does NOT affect NXT-MSC controllers.