← Database

CVE-2022-38628

MEDIUM CVSS: 6.1 Published: 2022-12-13 Modified: 2026-06-17

Description

Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-site scripting (XSS) vulnerability which is chained with a local session fixation. This vulnerability allows attackers to escalate privileges via unspecified vectors.

Affected Platforms

Niceforyou Linear Emerge E3 Access ControlNiceforyou Linear Emerge E3 Access Control Firmware

Weakness Type

CWE-384, CWE-384

References