.. / CVE-2022-31269

• Info Disclosure
• Nuclei
• Web

Exploit for Linear eMerge E3-Series - Information Disclosure (CVE-2022-31269)

Description:

Linear eMerge E3-Series devices are susceptible to information disclosure. Admin credentials are stored in clear text at the endpoint /test.txt in situations where the default admin credentials have been changed. An attacker can obtain admin credentials, access the admin dashboard, control building access and cameras, and access employee information.

Nuclei Template

View the template here CVE-2022-31269.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-31269.yaml

References: