CVE-2022-31269
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
8.1 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.9%
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building’s doors. (This occurs in situations where the CVE-2019-7271 default credentials have been changed.)
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| nortekcontrol:emerge_e3_firmware | nortekcontrol emerge e3 firmware | le | 0.32-09c |
References
Social References
More
Related
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
8.1 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.9%