medium6.1
CVE-2022-38628
Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-site scripting (XSS)…
Impact
Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-site scripting (XSS) vulnerability which is chained with a local session fixation. This vulnerability allows attackers to escalate privileges via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Niceforyou | Linear Emerge E3 Access Control Firmware | Versions 0.32-07e, 0.32-07p, 0.32-08e, 0.32-08f, 0.32-09a, 0.32-09b |