CVE-2022-31798

State: Published
Severity: Not scored
Published: Aug 25, 2022
Updated: Aug 3, 2024
Reserved: May 29, 2022

Description

Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://eg.linkedin.com/in/omar-1-hashem
http://packetstormsecurity.com/files/167992/Nortek-Linear-eMerge-E3-Series-Account-Takeover.html
https://gist.github.com/omarhashem123/bccdcec70ab7e8f00519d56ea2e3fd79

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.