341 matches found
CVE-2019-7262
Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7259
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...
CVE-2019-7259
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...
Hardcoded credentials
Linear eMerge E3-Series devices have Hard-coded Credentials...
Design/Logic Flaw
Linear eMerge E3-Series devices have Cleartext Credentials in a Database...
Authorization
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...
Cross site request forgery (csrf)
Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7258
Linear eMerge E3-Series devices allow Privilege Escalation...
CVE-2019-7258
CVE-2019-7258 affects Nice Linear eMerge E3-Series firmware 1.00-06 and earlier. Root cause: incorrect authorization (CWE-863) allowing privilege escalation. Impact: attacker could escalate to higher privileges and gain full control of the device; exposure is local to the device’s control interfa...
CVE-2019-7264
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform...
CVE-2019-7265
Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...
CVE-2019-7264
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform...
CVE-2019-7263
Linear eMerge E3-Series devices have a Version Control Failure...
CVE-2019-7263
Linear eMerge E3-Series devices have a Version Control Failure...
Remote code execution
Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...
Design/Logic Flaw
Linear eMerge E3-Series devices have a Version Control Failure...
Stack overflow
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform...
CVE-2019-7259
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...
CVE-2019-7259
CVE-2019-7259 affects Nice Linear eMerge E3-Series (firmware 1.00-06 and prior). The vulnerability allows an authorization bypass via a specific GET request, causing disclosure of administrative credentials and full control of the control interface. The issue is part of a broader set of flaws in ...