Nortekcontrol
24 CVEs across 10 Nortekcontrol products. Browse Nortekcontrol vulnerabilities, severities, and proof-of-concept exploits.
Nortekcontrol products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-31798 | Medium | 6.1 | 2022-08-25 | Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained… |
CVE-2022-31499 | Critical | 9.8 | 2022-08-25 | Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of… |
CVE-2022-31269 | High | 8.2 | 2022-08-25 | Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. (This occurs in… |
CVE-2019-7258 | High | 8.8 | 2019-07-02 | Linear eMerge E3-Series devices allow Privilege Escalation. |
CVE-2019-7257 | Critical | 10.0 | 2019-07-02 | Linear eMerge E3-Series devices allow Unrestricted File Upload. |
CVE-2019-7256 | Critical | 9.8 | 2019-07-02 | Linear eMerge E3-Series devices allow Command Injections. |
CVE-2019-7255 | Medium | 6.1 | 2019-07-02 | Linear eMerge E3-Series devices allow XSS. |
CVE-2019-7254 | High | 7.5 | 2019-07-02 | Linear eMerge E3-Series devices allow File Inclusion. |
CVE-2019-7253 | Critical | 9.8 | 2019-07-02 | Linear eMerge E3-Series devices allow Directory Traversal. |
CVE-2019-7252 | Critical | 9.8 | 2019-07-02 | Linear eMerge E3-Series devices have Default Credentials. |
CVE-2019-7262 | High | 8.8 | 2019-07-02 | Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF). |
CVE-2019-7261 | Critical | 9.8 | 2019-07-02 | Linear eMerge E3-Series devices have Hard-coded Credentials. |
CVE-2019-7260 | Critical | 9.8 | 2019-07-02 | Linear eMerge E3-Series devices have Cleartext Credentials in a Database. |
CVE-2019-7259 | High | 8.8 | 2019-07-02 | Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure. |
CVE-2019-7270 | High | 8.8 | 2019-07-02 | Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF). |
CVE-2019-7269 | Critical | 9.8 | 2019-07-02 | Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution. |
CVE-2019-7268 | Critical | 10.0 | 2019-07-02 | Linear eMerge 50P/5000P devices allow Unauthenticated File Upload. |
CVE-2019-7267 | Critical | 9.8 | 2019-07-02 | Linear eMerge 50P/5000P devices allow Cookie Path Traversal. |
CVE-2019-7266 | Critical | 9.8 | 2019-07-02 | Linear eMerge 50P/5000P devices allow Authentication Bypass. |
CVE-2019-7265 | Critical | 9.8 | 2019-07-02 | Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH). |
CVE-2019-7264 | Critical | 9.8 | 2019-07-02 | Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform. |
CVE-2019-7263 | Critical | 9.8 | 2019-07-02 | Linear eMerge E3-Series devices have a Version Control Failure. |
CVE-2019-7271 | Critical | 9.8 | 2019-07-01 | Nortek Linear eMerge 50P/5000P devices have Default Credentials. |
CVE-2018-5439 | Critical | 9.8 | 2018-02-19 | A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior. A remote attacker may be able to execute arbitrary cod… |