261 matches found
CVE-2019-7260
CVE-2019-7260 affects Nice Linear eMerge E3-Series firmware 1.00-06 and prior. The vulnerability is insufficiently protected credentials: passwords stored in plaintext in the device’s database, enabling an attacker to obtain admin credentials and compromise the control interface. Reported CVSS v3...
CVE-2019-7261
The CVE-2019-7261 entry affects Nice/Nortek Linear eMerge E3-Series devices (firmware 1.00-06 and earlier). The root cause is hard-coded credentials, including SSH access to root with embedded credentials, enabling full system compromise. Impact described across sources: remote access with high c...
CVE-2019-7261
Linear eMerge E3-Series devices have Hard-coded Credentials...
CVE-2019-7262
Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7263
Linear eMerge E3-Series devices have a Version Control Failure...
CVE-2019-7264
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform...
CVE-2019-7264
CVE-2019-7264 affects Nice Linear eMerge E3-Series devices. The vulnerability is a stack-based buffer overflow in multiple CGI binaries on firmware versions 1.00-06 and prior, caused by a boundary error in processing user input. Impacted devices could allow an attacker to execute arbitrary code o...
CVE-2019-7265
CVE-2019-7265 affects Nice Linear eMerge E3-Series devices (firmware 1.00-06 and earlier). The root cause is SSH access with hardcoded credentials, enabling remote code execution with root privileges. Public exploit code exists (Metasploit/Exploit-DB entries) demonstrating remote access. Impact i...
CVE-2019-7265
Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...
CVE-2019-7266
Linear eMerge 50P/5000P devices allow Authentication Bypass...
CVE-2019-7267
Linear eMerge 50P/5000P devices allow Cookie Path Traversal...
CVE-2019-7267
Linear eMerge 50P/5000P devices are affected by CVE-2019-7267 (Cookie Path Traversal). Public documents confirm the vulnerability exists in Linear eMerge 50P/5000P, with affected versions up to 4.6.07 (and prior). CVSS details indicate network-exposed, low complexity, no authentication, with high...
CVE-2019-7268
Product affected: Linear eMerge 50P/5000P devices. Vulnerable component: unrestricted/unauthenticated file upload during firmware upgrade. Root cause: lack of validation in the upload mechanism allows arbitrary file uploads to web root, enabling remote code execution with web server privileges. V...
CVE-2019-7268
Linear eMerge 50P/5000P devices allow Unauthenticated File Upload...
CVE-2019-7269
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution...
CVE-2019-7270
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7270
Linear eMerge 50P/5000P devices are affected by a CSRF vulnerability (CVE-2019-7270) in the web application. The issue arises from insufficient validation of requests from trusted users, enabling an attacker to induce unwanted actions if a user is authenticated. ICSA notes remote exploitation pot...
PT-2019-18500 · Linear · Linear Emerge 50P/5000P
Name of the Vulnerable Software and Affected Versions: Linear eMerge 50P/5000P devices affected versions not specified Description: The issue allows for Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application...
Nortek Security & Control Linear eMerge 50P/5000P Trust Management Issue Vulnerability
Nortek Security & Control Linear eMerge 50P/5000P is a browser-based access control system from Nortek Security & Control, USA. A vulnerability in Nortek Security & Control Linear eMerge 50P/5000P exists due to a trust management issue. The vulnerability stems from the lack of an effective trust...
