PT-2019-18487 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Unrestricted File Upload. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

PT-2019-18499 · Linear · Linear Emerge 50P/5000P

Name of the Vulnerable Software and Affected Versions: Linear eMerge 50P/5000P devices affected versions not specified Description: The issue allows authenticated command injection with root code execution. Recommendations: At the moment, there is no information about a newer version that contain...

PT-2019-18489 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Authorization Bypass with Information Disclosure. Recommendations: At the moment, there is no information about a newer version that contains a...

CVE-2019-7254: Improper Limitation of a Pathname to a Restricted Directory

Linear eMerge E3-Series devices allow File Inclusion...

CVE-2019-7257: Unrestricted Upload of File with Dangerous Type

Linear eMerge E3-Series devices allow Unrestricted File Upload...

CVE-2019-7264: Out-of-bounds Write

Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform...

CVE-2019-7265: Use of Hard-coded Credentials

Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...

CVE-2019-7261: Use of Hard-coded Credentials

Linear eMerge E3-Series devices have Hard-coded Credentials...

CVE-2019-7256

CVE-2019-7256 concerns a remote OS command injection in Linear eMerge E3-Series devices. Multiple connected sources (ExploitDB entries for 1.00-06 and earlier 2.x/4.x sketches, a Metasploit/MISP-linked exploit pack, and CISA KEV listings) confirm unauthenticated remote code execution via the E3 a...

CVE-2019-7253: Improper Limitation of a Pathname to a Restricted Directory

Linear eMerge E3-Series devices allow Directory Traversal...

PT-2019-18492 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application...

CVE-2019-7255: Improper Neutralization of Input During Web Page Generation

Linear eMerge E3-Series devices allow XSS...

CVE-2019-7252: Initialization of a Resource with an Insecure Default

Linear eMerge E3-Series devices have Default Credentials...

CVE-2019-7271

Nortek Linear eMerge 50P/5000P devices have Default Credentials...

Default credentials

Nortek Linear eMerge 50P/5000P devices have Default Credentials...

CVE-2019-7271

Nortek Linear eMerge 50P/5000P devices have Default Credentials...

CVE-2019-7271: Insufficiently Protected Credentials

Nortek Linear eMerge 50P/5000P devices have Default Credentials...

Nortek Linear eMerge E3 Series Command Injection Vulnerability

Nortek Security & Control is a company that provides wireless security, home automation and personal security systems and devices. A command injection vulnerability exists in Nortek Linear eMerge E3 Series V0.32-07e and prior versions, which can be exploited by a remote attacker to execute...

CVE-2018-5439

A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior. A remote attacker may be able to execute arbitrary code on a target machine with elevated privileges...

CVE-2018-5439

A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior. A remote attacker may be able to execute arbitrary code on a target machine with elevated privileges...