CVE-2022-31499: Nortekcontrol eMerge e3 Firmware

Critical severity, CVSS 9.8. EPSS: 64.6% chance of exploitation in the next 30 days.

Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.

Affected products

• Nortekcontrol eMerge e3 Firmware: up to and including 0.32-09c

Published 2022-08-25. Last modified 2026-06-17.