Lucene search

K
nvd[email protected]NVD:CVE-2022-31269
HistoryAug 25, 2022 - 10:15 p.m.

CVE-2022-31269

2022-08-2522:15:08
CWE-798
web.nvd.nist.gov
nortek linear emerge
admin credentials
vulnerability

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

0.003 Low

EPSS

Percentile

68.8%

Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building’s doors. (This occurs in situations where the CVE-2019-7271 default credentials have been changed.)

Affected configurations

NVD
Node
nortekcontrolemerge_e3_firmwareRange0.32-09c
AND
nortekcontrolemerge_e3Match-

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

0.003 Low

EPSS

Percentile

68.8%