Vendors / Nortekcontrol Records 24 All Threatist records
Exploited (KEV) 1
CVSS critical 16
CVSS high 6
Exploited now Nortekcontrol records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority HIGH 78
Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.64589 · Published 2022-08-25 · No fix listed CWE-78
Priority MEDIUM 49
A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04211 · Published 2018-02-19 · No fix listed CWE-77
Priority MEDIUM 46
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors.
CVSS 3.1 HIGH 8.2· Network · No auth · No interaction · EPSS 0.07446 · Published 2022-08-25 · No fix listed CWE-798
Priority LOW 39
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.08693 · Published 2022-08-25 · No fix listed CWE-384
Open these records in search → All records by CVSS severity
16 6 2 0 0
THREATIST.IORead the docs