CVE-2022-31798

Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained…

published August 25, 2022

CVSS
—
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08693 · 95.1th percentile
Published
2022-08-25T22:15Z
EPSS history
Timeline
  • 25 AUG 22:15Z
    Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained…
    cvelistv5