linear_emerge_essential_firmware 漏洞

中危CVE-2022-463812022/12/13

Linear eMerge E3-Series - Cross-Site Scripting

Linear eMerge E3-Series devices contain a cross-site scripting vulnerability via the type parameter, e.g., to the badging/badge_template_v0.php component. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site and thus steal cookie-based authentication credentials and launch other attacks. This affects versions 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e.

linear_emerge_essential_firmwarePoC 已收录

CVSS6.1EPSS 73.9%

严重CVE-2019-72562019/07/02