Vulnerability · Published Aug 25, 2022 · Assigned by mitre
CVE-2022-31269
High 8.2
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 7.4% (higher than 94% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Severity (CVSS NVD)8.2High
Exploit odds (30 days)7.4%top 5.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling2Nuclei, Public PoC
Official description
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. (This occurs in situations where the CVE-2019-7271 default credentials have been changed.)
Affected products (as reported)
References
- https://eg.linkedin.com/in/omar-1-hashem x_refsource_MISC
- https://www.nortekcontrol.com/access-control/ x_refsource_MISC
- http://packetstormsecurity.com/files/167990/Nortek-Linear-eMerge-E3-Series-Credential-Disclosure.html x_refsource_MISC
- https://gist.github.com/omarhashem123/71ec9223e90ea76a76096d777d9b945c x_refsource_MISC