CVE-2022-46381

2022-12-1322:15:10

CWE-79

[email protected]

web.nvd.nist.gov

linear

emerge

e3-series

cve-2022-46381

xss vulnerability

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

41.8%

JSON

Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e.

Affected configurations

NVD

Node

niceforyoulinear_emerge_e3_access_controlMatch-

AND

niceforyoulinear_emerge_e3_access_control_firmwareMatch0.32-07e

niceforyoulinear_emerge_e3_access_control_firmwareMatch0.32-07p

niceforyoulinear_emerge_e3_access_control_firmwareMatch0.32-08e

niceforyoulinear_emerge_e3_access_control_firmwareMatch0.32-08f

niceforyoulinear_emerge_e3_access_control_firmwareMatch0.32-09a

niceforyoulinear_emerge_e3_access_control_firmwareMatch0.32-09b

niceforyoulinear_emerge_e3_access_control_firmwareMatch0.32-09c

CPENameOperatorVersion
niceforyou:linear_emerge_e3_access_control_firmwareniceforyou linear emerge e3 access control firmwareeq0.32-07e
niceforyou:linear_emerge_e3_access_control_firmwareniceforyou linear emerge e3 access control firmwareeq0.32-07p
niceforyou:linear_emerge_e3_access_control_firmwareniceforyou linear emerge e3 access control firmwareeq0.32-08e
niceforyou:linear_emerge_e3_access_control_firmwareniceforyou linear emerge e3 access control firmwareeq0.32-08f
niceforyou:linear_emerge_e3_access_control_firmwareniceforyou linear emerge e3 access control firmwareeq0.32-09a
niceforyou:linear_emerge_e3_access_control_firmwareniceforyou linear emerge e3 access control firmwareeq0.32-09b
niceforyou:linear_emerge_e3_access_control_firmwareniceforyou linear emerge e3 access control firmwareeq0.32-09c

CPE	Name	Operator	Version
niceforyou:linear_emerge_e3_access_control_firmware	niceforyou linear emerge e3 access control firmware	eq	0.32-07e
niceforyou:linear_emerge_e3_access_control_firmware	niceforyou linear emerge e3 access control firmware	eq	0.32-07p
niceforyou:linear_emerge_e3_access_control_firmware	niceforyou linear emerge e3 access control firmware	eq	0.32-08e
niceforyou:linear_emerge_e3_access_control_firmware	niceforyou linear emerge e3 access control firmware	eq	0.32-08f
niceforyou:linear_emerge_e3_access_control_firmware	niceforyou linear emerge e3 access control firmware	eq	0.32-09a
niceforyou:linear_emerge_e3_access_control_firmware	niceforyou linear emerge e3 access control firmware	eq	0.32-09b
niceforyou:linear_emerge_e3_access_control_firmware	niceforyou linear emerge e3 access control firmware	eq	0.32-09c