CVE-2022-42710

MEDIUM

Niceforyou Linear Emerge E3 Access Control Firmware - XSS

Title source: rule
STIX 2.1

Description

Nice (formerly Nortek) Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e devices are vulnerable to Stored Cross-Site Scripting (XSS).

References (1)

Core 1

Scores

CVSS v3 5.4
EPSS 0.0026
EPSS Percentile 49.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (6)
niceforyou/linear_emerge_e3_access_control_firmware 0.32-07e
niceforyou/linear_emerge_e3_access_control_firmware 0.32-07p
niceforyou/linear_emerge_e3_access_control_firmware 0.32-08e
niceforyou/linear_emerge_e3_access_control_firmware 0.32-08f
niceforyou/linear_emerge_e3_access_control_firmware 0.32-09a
niceforyou/linear_emerge_e3_access_control_firmware 0.32-09c
Published Jan 03, 2023
Tracked Since Feb 18, 2026