CVE-2022-31269

CVE-2022-31269 is a high-severity information disclosure vulnerability affecting Nortek Linear eMerge E3-Series devices, including their firmware, up to version 0.32-09c. It allows an unauthenticated attacker to retrieve administrative credentials from a publicly accessible /test.txt file, even if default credentials have been changed, potentially enabling unauthorized access to building doors. With a CVSS score of 8.2 (HIGH) and an EPSS score indicating high exploitability, this vulnerability poses a significant risk due to its low attack complexity and direct impact on physical security. While there is no evidence of active exploitation or public Metasploit modules, Nuclei templates exist for detecting this flaw, and there is minimal community discussion or media coverage.