Vulnerabilities > Nortekcontrol > High

DATE CVE VULNERABILITY TITLE RISK
2022-08-25 CVE-2022-31269 Use of Hard-coded Credentials vulnerability in Nortekcontrol Emerge E3 Firmware 0.3207E/0.3207P/0.3209C
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors.
network
low complexity
nortekcontrol CWE-798
8.2
2019-07-02 CVE-2019-7258 Incorrect Authorization vulnerability in Nortekcontrol products
Linear eMerge E3-Series devices allow Privilege Escalation.
network
low complexity
nortekcontrol CWE-863
8.8
2019-07-02 CVE-2019-7254 Path Traversal vulnerability in Nortekcontrol products
Linear eMerge E3-Series devices allow File Inclusion.
network
low complexity
nortekcontrol CWE-22
7.5
2019-07-02 CVE-2019-7262 Cross-Site Request Forgery (CSRF) vulnerability in Nortekcontrol products
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
network
low complexity
nortekcontrol CWE-352
8.8
2019-07-02 CVE-2019-7259 Information Exposure vulnerability in Nortekcontrol products
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
network
low complexity
nortekcontrol CWE-200
8.8
2019-07-02 CVE-2019-7270 Cross-Site Request Forgery (CSRF) vulnerability in Nortekcontrol products
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).
network
low complexity
nortekcontrol CWE-352
8.8