CVE-2019-7264

Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform...

CVE-2019-7265

Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...

CVE-2019-7266

Linear eMerge 50P/5000P devices allow Authentication Bypass...

CVE-2019-7265

Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...

CVE-2019-7268

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload...

CVE-2019-7267

Linear eMerge 50P/5000P devices allow Cookie Path Traversal...

CVE-2019-7266

Linear eMerge 50P/5000P devices allow Authentication Bypass...

CVE-2019-7264

Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform...

CVE-2019-7263

Linear eMerge E3-Series devices have a Version Control Failure...

CVE-2019-7263

Linear eMerge E3-Series devices have a Version Control Failure...

Remote code execution

Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...

Unrestricted file upload

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload...

Cross site request forgery (csrf)

Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery CSRF...

Design/Logic Flaw

Linear eMerge E3-Series devices have a Version Control Failure...

Command injection

Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution...

Path traversal

Linear eMerge 50P/5000P devices allow Cookie Path Traversal...

CVE-2019-7259

Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...

CVE-2019-7259

CVE-2019-7259 affects Nice Linear eMerge E3-Series (firmware 1.00-06 and prior). The vulnerability allows an authorization bypass via a specific GET request, causing disclosure of administrative credentials and full control of the control interface. The issue is part of a broader set of flaws in ...

CVE-2019-7260

Linear eMerge E3-Series devices have Cleartext Credentials in a Database...

CVE-2019-7260

CVE-2019-7260 affects Nice Linear eMerge E3-Series firmware 1.00-06 and prior. The vulnerability is insufficiently protected credentials: passwords stored in plaintext in the device’s database, enabling an attacker to obtain admin credentials and compromise the control interface. Reported CVSS v3...