Vulnerabilities > Nortekcontrol > Emerge E3 Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-08-25 CVE-2022-31798 Session Fixation vulnerability in Nortekcontrol Emerge E3 Firmware 0.3207E/0.3207P
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together.
network
low complexity
nortekcontrol CWE-384
6.1
2018-02-19 CVE-2018-5439 Command Injection vulnerability in Nortekcontrol Emerge E3 Firmware
A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior.
network
low complexity
nortekcontrol CWE-77
critical
10.0