261 matches found
CVE-2019-7252
CVE-2019-7252 affects Nortek/Nortek Security & Control Linear eMerge E3-Series devices. The connected sources confirm a trust-management issue enabling default credentials to be used by an attacker, potentially leading to privilege escalation and root access. Public records reference default-pass...
CVE-2019-7252
Linear eMerge E3-Series devices have Default Credentials...
CVE-2019-7253
CVE-2019-7253 affects Nice Linear eMerge E3-Series firmware 1.00-06 and prior, where improper limitation of a pathname to a restricted directory (path traversal) can enable a remote attacker to access restricted files and user data. The Red Hat advisory and CISA/ICS sources confirm a high-severit...
CVE-2019-7253
Linear eMerge E3-Series devices allow Directory Traversal...
CVE-2019-7254
Linear eMerge E3-Series devices allow File Inclusion...
CVE-2019-7254
CVE-2019-7254 affects Linear eMerge E3-Series firmware versions 1.00-06 and earlier. The connected sources explicitly describe a Local File Inclusion via directory traversal in the web interface, enabling an unauthenticated or low-privilege attacker to access restricted files (e.g., via a crafted...
CVE-2019-7255
Linear eMerge E3-Series devices allow XSS...
CVE-2019-7257
Linear eMerge E3-Series devices allow Unrestricted File Upload...
CVE-2019-7261
Linear eMerge E3-Series devices have Hard-coded Credentials...
CVE-2019-7260
Linear eMerge E3-Series devices have Cleartext Credentials in a Database...
CVE-2019-7261
Linear eMerge E3-Series devices have Hard-coded Credentials...
CVE-2019-7260
Linear eMerge E3-Series devices have Cleartext Credentials in a Database...
CVE-2019-7259
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...
Hardcoded credentials
Linear eMerge E3-Series devices have Hard-coded Credentials...
Authorization
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...
Cross site request forgery (csrf)
Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7258
Linear eMerge E3-Series devices allow Privilege Escalation...
CVE-2019-7265
Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...