Emerge E3 Firmware vulnerabilities

3 known vulnerabilities in Emerge E3 Firmware from Nortekcontrol. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  eMerge e3-Series: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-9441Oct 2, 2024LinearEPSS 53.5%

  The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the login_id parameter when invoking the forgot_password functionality over

• 9.8 Critical severity

  Emerge E3 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-31499Aug 25, 2022NortekcontrolEPSS 65%

  Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.

• 8.2 High severity

  Emerge E3 Firmware: Use of Hard-coded Credentials

  CVE-2022-31269Aug 25, 2022NortekcontrolEPSS 7.58%

  Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. (This occurs in situations where the CVE-2019-7271 default credentials have been changed.)