CVE-2019-7267

Linear eMerge 50P/5000P devices allow Cookie Path Traversal...

CVE-2019-7269

Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution...

eMerge50P 5000P 4.6.07 - Remote Code Execution

eMerge50P 5000P 4.6.07 - Remote Code Execution Exploit Title: eMerge50P 5000P 4.6.07 - Remote Code Execution Google Dork: NA Date: 2018-11-11 Exploit Author: LiquidWorm Vendor Homepage: http://linear-solutions.com/nscfamily/e3-series/ Software Link: http://linear-solutions.com/nscfamily/e3-series...

Linear eMerge50P/5000P 4.6.07 Remote Code Execution

!/bin/bash Full remote code execution exploit for the Linear eMerge50P/5000P 4.6.07 Including escalating to root privileges CVE: CVE-2019-7266, CVE-2019-7267, CVE-2019-7268, CVE-2019-7269 Advisory: https://applied-risk.com/resources/ar-2019-006 Paper:...

eMerge50P 5000P 4.6.07 - Remote Code Execution

Exploit Title: eMerge50P 5000P 4.6.07 - Remote Code Execution Google Dork: NA Date: 2018-11-11 Exploit Author: LiquidWorm Vendor Homepage: http://linear-solutions.com/nscfamily/e3-series/ Software Link: http://linear-solutions.com/nscfamily/e3-series/ Version: 4.6.07 Tested on: NA CVE :...

CVE-2019-7267

Linear eMerge 50P/5000P devices allow Cookie Path Traversal...

CVE-2019-7266

Linear eMerge 50P/5000P devices allow Authentication Bypass...

CVE-2019-7266

Linear eMerge 50P/5000P devices allow Authentication Bypass...

Cross site request forgery (csrf)

Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery CSRF...

Path traversal

Linear eMerge 50P/5000P devices allow Cookie Path Traversal...

Authentication flaw

Linear eMerge 50P/5000P devices allow Authentication Bypass...

CVE-2019-7266

Summary (CVE-2019-7266) : The Linear eMerge 50P/5000P access-control system contains an authentication bypass vulnerability (Improper Authentication, CWE-287) affecting versions up to 4.6.07 (revision 79330) and earlier. Exploitation could allow a remote attacker to bypass login checks and gain u...

CVE-2019-7267

Linear eMerge 50P/5000P devices are affected by CVE-2019-7267 (Cookie Path Traversal). Public documents confirm the vulnerability exists in Linear eMerge 50P/5000P, with affected versions up to 4.6.07 (and prior). CVSS details indicate network-exposed, low complexity, no authentication, with high...

CVE-2019-7269

The authenticated command-injection vulnerability CVE-2019-7269 affects Linear eMerge 50P/5000P devices (versions 4.6.07 and earlier). Root cause: the application constructs OS commands from externally influenced input without proper neutralization, enabling remote command execution with web serv...

CVE-2019-7270

Linear eMerge 50P/5000P devices are affected by a CSRF vulnerability (CVE-2019-7270) in the web application. The issue arises from insufficient validation of requests from trusted users, enabling an attacker to induce unwanted actions if a user is authenticated. ICSA notes remote exploitation pot...

PT-2019-18498 · Linear · Linear Emerge 50P/5000P

Name of the Vulnerable Software and Affected Versions: Linear eMerge 50P/5000P devices affected versions not specified Description: The issue allows for unauthenticated file upload. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-2019-7271

Nortek Linear eMerge 50P/5000P devices have Default Credentials...

Default credentials

Nortek Linear eMerge 50P/5000P devices have Default Credentials...

CVE-2019-7271

Nortek Linear eMerge 50P/5000P devices have Default Credentials...

PT-2019-18501 · Nortek Linear · Emerge 50P/5000P

Name of the Vulnerable Software and Affected Versions: Nortek Linear eMerge 50P/5000P devices affected versions not specified Description: The issue concerns default credentials in Nortek Linear eMerge 50P/5000P devices. Recommendations: At the moment, there is no information about a newer versio...