PT-2022-7149 · Linear · Linear Emerge E3-Series

Omar Hashim · Published 2022-12-17 · Updated 2025-04-10 · CVE-2022-42710

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linear eMerge E3-Series versions 0.32-07e through 0.32-09c

Description The issue is related to the lack of protection for the web page structure, allowing a remote attacker to conduct a cross-site scripting (XSS) attack. This can be exploited to inject malicious scripts into the website. The estimated number of potentially affected devices is not specified.

Recommendations For Linear eMerge E3-Series versions 0.32-07e through 0.32-09c, consider disabling access to vulnerable web pages until a patch is available. Restrict access to the web interface to minimize the risk of exploitation. Avoid using the web interface for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2023-07868

CVE-2022-42710

Affected Products

Linear Emerge E3-Series

References · 9

• 🔥 https://github.com/omarhashem123/Security-Research/blob/main/CVE-2022-42710/CVE-2022-42710.txt · Exploit
• https://osv.dev/vulnerability/CVE-2022-42710 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42710 · Security Note
• https://bdu.fstec.ru/vul/2023-07868 · Security Note
• https://t.me/cvenotify/41701 · Telegram Post
• https://t.me/cvenotify/41233 · Telegram Post
• https://t.me/pentestingnews/31415 · Telegram Post
• https://t.me/thebugbountyhunter/6816 · Telegram Post
• https://t.me/cvenotify/118642 · Telegram Post