CVE-2022-31269

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. (This occurs in situations where the CVE-2019-7271 default credentials have been changed.)

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Weakness enumeration

CWE-798

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/167990/Nortek-Linear-eMerge-E3-Series-Credential-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
https://eg.linkedin.com/in/omar-1-hashemNot Applicable
https://gist.github.com/omarhashem123/71ec9223e90ea76a76096d777d9b945cExploit, Third Party Advisory
https://www.nortekcontrol.com/access-control/Product
http://packetstormsecurity.com/files/167990/Nortek-Linear-eMerge-E3-Series-Credential-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
https://eg.linkedin.com/in/omar-1-hashemNot Applicable
https://gist.github.com/omarhashem123/71ec9223e90ea76a76096d777d9b945cExploit, Third Party Advisory
https://www.nortekcontrol.com/access-control/Product

Timeline

Published: Aug 25, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-31275.4Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.CVE-2022-312739.8An issue in TopIDP3000 Topsec Operating System tos_3.3.005.665b.15_smpidp allows attackers to perform a brute-force attack via a crafted ses CVE-2022-312778.8Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrict CVE-2022-31284.8The Donation Thermometer WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege u CVE-2022-312825.5Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at /Source/C++/Core/Ap4DataBuffer.cpp:175.CVE-2022-312855.5An issue was discovered in Bento4 1.2. The allocator is out of memory in /Source/C++/Core/Ap4Array.h.CVE-2022-312875.5An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp.CVE-2022-31299.8A vulnerability was found in codeprojects Online Driving School. It has been rated as critical. Affected by this issue is some unknown funct CVE-2022-312905.4A cross-site scripting (XSS) vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTM CVE-2022-312917.5An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets.CVE-2022-312946.5An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update use CVE-2022-312957.5An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.