CVE-2019-7267

Linear eMerge 50P/5000P devices are affected by CVE-2019-7267 (Cookie Path Traversal). Public documents confirm the vulnerability exists in Linear eMerge 50P/5000P, with affected versions up to 4.6.07 (and prior). CVSS details indicate network-exposed, low complexity, no authentication, with high...

CVE-2019-7267

Linear eMerge 50P/5000P devices allow Cookie Path Traversal...

CVE-2019-7268

Product affected: Linear eMerge 50P/5000P devices. Vulnerable component: unrestricted/unauthenticated file upload during firmware upgrade. Root cause: lack of validation in the upload mechanism allows arbitrary file uploads to web root, enabling remote code execution with web server privileges. V...

CVE-2019-7268

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload...

CVE-2019-7269

Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution...

CVE-2019-7270

Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery CSRF...

CVE-2019-7270

Linear eMerge 50P/5000P devices are affected by a CSRF vulnerability (CVE-2019-7270) in the web application. The issue arises from insufficient validation of requests from trusted users, enabling an attacker to induce unwanted actions if a user is authenticated. ICSA notes remote exploitation pot...

PT-2019-18495 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Remote Code Execution, providing root access over SSH. Recommendations: At the moment, there is no information about a newer version that contai...

Nortek Security & Control Linear eMerge 50P/5000P Trust Management Issue Vulnerability

Nortek Security & Control Linear eMerge 50P/5000P is a browser-based access control system from Nortek Security & Control, USA. A vulnerability in Nortek Security & Control Linear eMerge 50P/5000P exists due to a trust management issue. The vulnerability stems from the lack of an effective trust...

PT-2019-18498 · Linear · Linear Emerge 50P/5000P

Name of the Vulnerable Software and Affected Versions: Linear eMerge 50P/5000P devices affected versions not specified Description: The issue allows for unauthenticated file upload. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2019-18496 · Linear · Linear Emerge 50P/5000P

Name of the Vulnerable Software and Affected Versions: Linear eMerge 50P/5000P devices affected versions not specified Description: The issue allows for authentication bypass. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2019-18500 · Linear · Linear Emerge 50P/5000P

Name of the Vulnerable Software and Affected Versions: Linear eMerge 50P/5000P devices affected versions not specified Description: The issue allows for Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application...

CVE-2019-7256

Linear eMerge E3-Series devices allow Command Injections...

PT-2019-18497 · Linear · Linear Emerge 50P/5000P

Name of the Vulnerable Software and Affected Versions: Linear eMerge 50P/5000P devices affected versions not specified Description: The issue allows Cookie Path Traversal, which may lead to unauthorized access or data manipulation. No information is provided about the estimated number of...

PT-2019-18491 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue concerns hard-coded credentials in the Linear eMerge E3-Series devices. Recommendations: At the moment, there is no information about a newer version that...

CVE-2019-7256

Linear eMerge E3-Series devices allow Command Injections...

PT-2019-18488 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Privilege Escalation. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2019-18486 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series versions le1.00-06 Description: The issue allows Command Injections. Linear eMerge E3-Series devices are affected. The vulnerability was exploited in the wild, posing significant security risks. Recommendations: For...

PT-2019-18489 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Authorization Bypass with Information Disclosure. Recommendations: At the moment, there is no information about a newer version that contains a...

PT-2019-18487 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Unrestricted File Upload. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...