CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2019-7256
Linear eMerge E3-Series devices allow Command Injections.
Severity
- EPSS
- 97% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2024-03-25, due 2024-04-15
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nortekcontrol:linear_emerge_elite_firmware
- nortekcontrol:linear_emerge_essential_firmware
References
- http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html
- http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html
- http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html
- http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html
- https://applied-risk.com/labs/advisories