What’s Vulnerable › Vulnerabilities

CVE-2022-31269

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-08-25 · updated 2026-06-17
• Weakness: CWE-798

Description

Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. (This occurs in situations where the CVE-2019-7271 default credentials have been changed.)

Affected products

• Nortek Linear eMerge E3 Series: through 0.32-09c

References

• http://packetstormsecurity.com/files/167990/Nortek-Linear-eMerge-E3-Series-Credential-Disclosure.html
• https://eg.linkedin.com/in/omar-1-hashem
• https://gist.github.com/omarhashem123/71ec9223e90ea76a76096d777d9b945c
• https://www.nortekcontrol.com/access-control/
• http://packetstormsecurity.com/files/167990/Nortek-Linear-eMerge-E3-Series-Credential-Disclosure.html
• https://eg.linkedin.com/in/omar-1-hashem
• https://gist.github.com/omarhashem123/71ec9223e90ea76a76096d777d9b945c
• https://www.nortekcontrol.com/access-control/

Get alerted when CVE-2022-31269 or the next vulnerability affects your stack