CVE-2022-46381: XSS
Published Dec 13, 2022
·Updated
Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badgetemplatev0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e.
Affected Software
16 affected components
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-07e
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-07p
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-08e
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-08f
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-09a
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-09b
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-09c
Niceforyou Linear Emerge E3 Access Control
All of the following
Any of the following
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-07e
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-07p
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-08e
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-08f
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-09a
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-09b
Niceforyou Linear Emerge E3 Access Control Firmware=0.32-09c
Niceforyou Linear Emerge E3 Access Control
Event History
Dec 13, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What devices are affected by CVE-2022-46381 vulnerability?
Certain Linear eMerge E3-Series devices with firmware versions 0.32-07e, 0.32-07p, 0.32-08e, 0.32-08f, 0.32-09a, 0.32-09b, and 0.32-09c are affected.
2
What type of vulnerability is CVE-2022-46381?
CVE-2022-46381 is a Cross-Site Scripting (XSS) vulnerability.
3
How severe is CVE-2022-46381 vulnerability?
The severity of CVE-2022-46381 vulnerability is rated as medium with a CVSS score of 6.1.