CVE-2022-38628
Published: 13 December 2022
Summary
CVE-2022-38628 is a medium-severity Session Fixation (CWE-384) vulnerability in Niceforyou Linear Emerge E3 Access Control Firmware. Its CVSS base score is 6.1 (Medium).
Operationally, ranked in the top 7.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
Nortek Linear eMerge E3-Series access control systems in versions 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e contain a cross-site scripting vulnerability chained with local session fixation, tracked as CVE-2022-38628. The flaw is assigned CWE-384 and carries a CVSS 3.1 base score of 6.1 reflecting network attack vector, low complexity, no required privileges, and required user interaction with changed scope.
An unauthenticated attacker can exploit the issue by delivering a crafted link or payload that triggers the XSS and session fixation chain, enabling privilege escalation on the affected appliance through vectors that remain unspecified in public reporting. The current and peak EPSS score both stand at 0.0831 with no material increase observed after disclosure.
Public references consist of a single technical note hosted on GitHub that reproduces the discovery but supplies no vendor advisory, patch information, or mitigation guidance.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-41205
Vulnerability details
Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-site scripting (XSS) vulnerability which is chained with a local session fixation. This vulnerability allows attackers to escalate privileges via unspecified vectors.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Session termination after a set interval shortens the usable lifetime of a fixed session identifier, making successful exploitation of session fixation more difficult.
Re-authentication typically forces issuance of a new session, limiting the window for exploitation of a previously fixed session identifier.
Enforces proper session ID generation and binding, preventing fixation of a known session token.