Lucene search
MitreCVELIST:CVE-2022-31798HistoryAug 25, 2022 - 10:15 p.m.
CVE-2022-31798
2022-08-2522:15:45
mitre
www.cve.org
nortek linear e3-series
xss
session fixation
phpsessid
admin account
user account
0.001 Low
EPSS
Percentile
47.5%
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.
Related
cve
cve
CVE-2022-31798
2022-08-25 23:15:08
nvd
nvd
CVE-2022-31798
2022-08-25 23:15:08
zdt
zdt
Nortek Linear eMerge E3-Series Account Takeover XSS Vulnerability
2022-08-08 00:00:00
prion
prion
Session fixation
2022-08-25 23:15:00
nuclei
nuclei
Nortek Linear eMerge E3-Series - Cross-Site Scripting
2022-08-12 11:31:04
packetstorm
packetstorm
Nortek Linear eMerge E3-Series Account Takeover
2022-08-08 00:00:00