CVE-2022-38628: Niceforyou Linear eMerge e3 Access Control Firmware

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-site scripting (XSS) vulnerability which is chained with a local session fixation. This vulnerability allows attackers to escalate privileges via unspecified vectors.

Affected products

• Niceforyou Linear eMerge e3 Access Control Firmware: version 0.32-07e only; version 0.32-07p only; version 0.32-08e only; version 0.32-08f only; version 0.32-09a only; version 0.32-09b only; …

Published 2022-12-13. Last modified 2026-06-17.