{"vulnerability": "CVE-2022-31798", "sightings": [{"uuid": "fceaab35-830b-4583-8b49-47a2f00e8cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2671", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31798\nGithub: https://github.com/omarhashem123/CVE-2022-31798\nDescribe: \nNortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.", "creation_timestamp": "2026-08-02T00:01:19.198526Z"}, {"uuid": "4bcb4b2b-9068-465f-83d7-01c816802cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2671", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31798\nGithub: https://github.com/omarhashem123/CVE-2022-31798\nDescribe: \nNortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.", "creation_timestamp": "2026-08-01T03:00:03.929138Z"}, {"uuid": "fd0c96b8-936b-4cdb-b69d-9526214e5eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "seen", "source": "https://t.me/CVEhub/2671", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31798\nGithub: https://github.com/omarhashem123/CVE-2022-31798\nDescribe: \nNortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.", "creation_timestamp": "2026-07-29T12:01:00.588737Z"}, {"uuid": "19724fe5-169d-49e1-92ad-42b2457e1f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "seen", "source": "https://t.me/CVEhub/2671", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31798\nGithub: https://github.com/omarhashem123/CVE-2022-31798\nDescribe: \nNortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.", "creation_timestamp": "2026-07-30T00:01:39.078054Z"}, {"uuid": "16197b6d-d06c-4c48-a121-f314636e5e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "seen", "source": "https://t.me/hacking_Attack/64710", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Account Takeover\n\nhttps://4.bp.blogspot.com/-lQ2zJgiLTsU/WWlu34sMcWI/AAAAAAAAII4/mS7xceEZnmUYAvFeoaUiLc9JINHoDjNsACLcBGAs/s1600/h102.png \nNortek Linear eMerge E3-Series version 0.32-07p suffers from a vulnerability where session fixation tied with cross site scripting can allow for account takeover.\n\nSHA-256 | 6a30c71e741d3009dbaf81b18d14a4260f6043c44ce1ca7ff3fc8841c01a990e\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Account Take Over\n# Exploit Author: Omar Hashim\n# Version: 0.32-07p\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31798\n\n# Description\n====================\nThere is local session fixation that chained with reflected cross-site\nscripting leads to account take over of admin or less privileged users\n\n# Proof Of Concept:\n====================\nhttp://\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:26.818897Z"}, {"uuid": "e84e03aa-f305-42d3-8c6b-6165780b5269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "seen", "source": "https://t.me/hacking_Attack/64710", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Account Takeover\n\nhttps://4.bp.blogspot.com/-lQ2zJgiLTsU/WWlu34sMcWI/AAAAAAAAII4/mS7xceEZnmUYAvFeoaUiLc9JINHoDjNsACLcBGAs/s1600/h102.png \nNortek Linear eMerge E3-Series version 0.32-07p suffers from a vulnerability where session fixation tied with cross site scripting can allow for account takeover.\n\nSHA-256 | 6a30c71e741d3009dbaf81b18d14a4260f6043c44ce1ca7ff3fc8841c01a990e\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Account Take Over\n# Exploit Author: Omar Hashim\n# Version: 0.32-07p\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31798\n\n# Description\n====================\nThere is local session fixation that chained with reflected cross-site\nscripting leads to account take over of admin or less privileged users\n\n# Proof Of Concept:\n====================\nhttp://\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:41.890880Z"}, {"uuid": "c7074bd7-7996-4ff9-beb7-dabb3c81d5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/64710", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Account Takeover\n\nhttps://4.bp.blogspot.com/-lQ2zJgiLTsU/WWlu34sMcWI/AAAAAAAAII4/mS7xceEZnmUYAvFeoaUiLc9JINHoDjNsACLcBGAs/s1600/h102.png \nNortek Linear eMerge E3-Series version 0.32-07p suffers from a vulnerability where session fixation tied with cross site scripting can allow for account takeover.\n\nSHA-256 | 6a30c71e741d3009dbaf81b18d14a4260f6043c44ce1ca7ff3fc8841c01a990e\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Account Take Over\n# Exploit Author: Omar Hashim\n# Version: 0.32-07p\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31798\n\n# Description\n====================\nThere is local session fixation that chained with reflected cross-site\nscripting leads to account take over of admin or less privileged users\n\n# Proof Of Concept:\n====================\nhttp://\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T12:00:05.423936Z"}, {"uuid": "4fe15aff-6955-4f51-bf5d-fe2c26239e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/64710", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Account Takeover\n\nhttps://4.bp.blogspot.com/-lQ2zJgiLTsU/WWlu34sMcWI/AAAAAAAAII4/mS7xceEZnmUYAvFeoaUiLc9JINHoDjNsACLcBGAs/s1600/h102.png \nNortek Linear eMerge E3-Series version 0.32-07p suffers from a vulnerability where session fixation tied with cross site scripting can allow for account takeover.\n\nSHA-256 | 6a30c71e741d3009dbaf81b18d14a4260f6043c44ce1ca7ff3fc8841c01a990e\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Account Take Over\n# Exploit Author: Omar Hashim\n# Version: 0.32-07p\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31798\n\n# Description\n====================\nThere is local session fixation that chained with reflected cross-site\nscripting leads to account take over of admin or less privileged users\n\n# Proof Of Concept:\n====================\nhttp://\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-06T00:00:48.452044Z"}]}