PT-2022-20940 · Nortek Linear · Nortek Linear Emerge E3-Series

Omarhashem123 · Published 2022-08-25 · Updated 2023-08-08 · CVE-2022-31798

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nortek Linear eMerge E3-Series version 0.32-07p

Description The issue allows an attacker to take over an admin account or a user account through a combination of XSS and session fixation via the PHPSESSID when devices are chained together. This is exploited through the "/card scan.php?CardFormatNo=" endpoint, allowing for session fixation.

Recommendations For Nortek Linear eMerge E3-Series version 0.32-07p, consider disabling access to the "/card scan.php?CardFormatNo=" endpoint until a patch is available to prevent XSS and session fixation attacks. Additionally, restrict the use of the PHPSESSID to minimize the risk of session fixation.

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2022-31798

Affected Products

Nortek Linear Emerge E3-Series

References · 6

• https://osv.dev/vulnerability/CVE-2022-31798 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31798 · Security Note
• https://t.me/cvenotify/35657 · Telegram Post
• https://gist.github.com/omarhashem123/bccdcec70ab7e8f00519d56ea2e3fd79 · Note
• https://eg.linkedin.com/in/omar-1-hashem · Note
• http://packetstormsecurity.com/files/167992/Nortek-Linear-eMerge-E3-Series-Account-Takeover.html · Note