What’s Vulnerable › Vulnerabilities

CVE-2022-31499

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 64.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-08-25 · updated 2026-06-17
• Weakness: CWE-78

Description

Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.

Affected products

• Nortek Linear eMerge E3 Series: through 0.32-09c

References

• http://packetstormsecurity.com/files/167991/Nortek-Linear-eMerge-E3-Series-Command-Injection.html
• https://eg.linkedin.com/in/omar-1-hashem
• https://gist.github.com/omarhashem123/5f0c6f1394099b555740fdc5c7651ee2
• http://packetstormsecurity.com/files/167991/Nortek-Linear-eMerge-E3-Series-Command-Injection.html
• https://eg.linkedin.com/in/omar-1-hashem
• https://gist.github.com/omarhashem123/5f0c6f1394099b555740fdc5c7651ee2

Get alerted when CVE-2022-31499 or the next vulnerability affects your stack