CVE-2022-31499 PoC — Nortek Control Linear eMerge E3-Series 操作系统命令注入漏洞

Source

https://github.com/omarhashem123/CVE-2022-31499

Associated Vulnerability

Title: Nortek Control Linear eMerge E3-Series 操作系统命令注入漏洞 (CVE-2022-31499)
Description:Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.

Description

CVE-2022-31499 Proof of Concept

Readme

# CVE-2022-31499
### Exploit Title: Nortek Linear eMerge E3-Series - Blind OS Command Injection

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →