CVE-2022-31269
HIGH NUCLEINortek Linear eMerge E3-Series <0.32-09c - Info Disclosure
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2022-31269. PoCs published by omarhashem123, Henry4E36. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a writeup for CVE-2022-31269, an information disclosure vulnerability in Nortek Linear eMerge E3-Series that allows access to the admin dashboard. No exploit code is provided, only a description of the vulnerability.
Description
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. (This occurs in situations where the CVE-2019-7271 default credentials have been changed.)
Exploits (2)
This repository contains a writeup for CVE-2022-31269, an information disclosure vulnerability in Nortek Linear eMerge E3-Series that allows access to the admin dashboard. No exploit code is provided, only a description of the vulnerability.
This PoC exploits an information disclosure vulnerability in Nortek Control Linear eMerge E3-Series by fetching a test.txt file containing credentials. It parses and displays leaked usernames and passwords.
Nuclei Templates (1)
http.title:"Linear eMerge" || http.title:"emerge" || http.title:"linear emerge"
title="emerge" || title="linear emerge"
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N