niceforyou Vulnerabilities and Affected Products
Vulnerabilities associated with linear_emerge_e3_access_control_firmware.
Products
Clear product- linear_emerge_e3_access_control_firmware2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-38627CRITICAL | niceforyou linear_emerge_e3_access_control_firmware Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a SQL injection vulnerability via the idt parameter. | CVSS9.8v3.1 | EPSS4.27% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2022-46381MEDIUM | niceforyou linear_emerge_e3_access_control_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e. | CVSS6.1v3.1 | EPSS1.74% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |