← Database

CVE-2022-31499

CRITICAL CVSS: 9.8 Published: 2022-08-25 Modified: 2026-06-17

Description

Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.

Affected Platforms

Nortekcontrol Emerge E3Nortekcontrol Emerge E3 Firmware

Weakness Type

CWE-78

References