Published: 25/08/2022 Updated: 08/08/2023

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 0

Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an malicious user to take over an admin account or a user account.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nortekcontrol emerge_e3_firmware

Nortek Linear eMerge E3-Series version 032-07p suffers from a vulnerability where session fixation tied with cross site scripting can allow for account takeover ...

CVE-2022-31798 Proof of Concept

CVE-2022-31798 Exploit Title: Nortek Linear eMerge E3-Series - account takeover

CWE-384 http://packetstormsecurity.com/files/167992/Nortek-Linear-eMerge-E3-Series-Account-Takeover.html https://eg.linkedin.com/in/omar-1-hashem https://gist.github.com/omarhashem123/bccdcec70ab7e8f00519d56ea2e3fd79 https://nvd.nist.gov https://github.com/omarhashem123/CVE-2022-31798 https://packetstormsecurity.com/files/167992/Nortek-Linear-eMerge-E3-Series-Account-Takeover.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-31798

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect