CVE-2019-7260

CVE-2019-7260 affects Nice Linear eMerge E3-Series firmware 1.00-06 and prior. The vulnerability is insufficiently protected credentials: passwords stored in plaintext in the device’s database, enabling an attacker to obtain admin credentials and compromise the control interface. Reported CVSS v3...

CVE-2019-7261

The CVE-2019-7261 entry affects Nice/Nortek Linear eMerge E3-Series devices (firmware 1.00-06 and earlier). The root cause is hard-coded credentials, including SSH access to root with embedded credentials, enabling full system compromise. Impact described across sources: remote access with high c...

CVE-2019-7261

Linear eMerge E3-Series devices have Hard-coded Credentials...

CVE-2019-7262

Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...

CVE-2019-7262

CVE-2019-7262 affects Nice Linear eMerge E3-Series devices (firmware 1.00-06 and prior). The vulnerability is Cross-Site Request Forgery (CSRF) in the device’s web interface, caused by insufficient validation of requests from trusted users, enabling an attacker to perform actions with administrat...

CVE-2019-7263

Linear eMerge E3-Series devices have a Version Control Failure...

CVE-2019-7263

CVE-2019-7263 affects Linear eMerge E3-Series devices and is described as a Version Control Failure. Connected sources corroborate the affected product and nature of the issue. The NVD entry assigns a high/critical impact profile (CVSSv3: 9.8) with network attack vector, no authentication/privile...

CVE-2019-7264

CVE-2019-7264 affects Nice Linear eMerge E3-Series devices. The vulnerability is a stack-based buffer overflow in multiple CGI binaries on firmware versions 1.00-06 and prior, caused by a boundary error in processing user input. Impacted devices could allow an attacker to execute arbitrary code o...

CVE-2019-7264

Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform...

CVE-2019-7265

CVE-2019-7265 affects Nice Linear eMerge E3-Series devices (firmware 1.00-06 and earlier). The root cause is SSH access with hardcoded credentials, enabling remote code execution with root privileges. Public exploit code exists (Metasploit/Exploit-DB entries) demonstrating remote access. Impact i...

CVE-2019-7265

Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...

PT-2019-18485 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for cross-site scripting XSS attacks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2019-18495 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Remote Code Execution, providing root access over SSH. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2019-18491 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue concerns hard-coded credentials in the Linear eMerge E3-Series devices. Recommendations: At the moment, there is no information about a newer version that...

CVE-2019-7256

Linear eMerge E3-Series devices allow Command Injections...

CVE-2019-7256

Linear eMerge E3-Series devices allow Command Injections...

PT-2019-18488 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Privilege Escalation. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2019-18492 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application...

PT-2019-18489 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Authorization Bypass with Information Disclosure. Recommendations: At the moment, there is no information about a newer version that contains a...

PT-2019-18487 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Unrestricted File Upload. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...