959 matches found
CVE-2019-7270
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7266
Linear eMerge 50P/5000P devices allow Authentication Bypass...
CVE-2019-7264
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform...
CVE-2019-7263
Linear eMerge E3-Series devices have a Version Control Failure...
CVE-2019-7263
Linear eMerge E3-Series devices have a Version Control Failure...
Cross site request forgery (csrf)
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery CSRF...
Remote code execution
Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...
Design/Logic Flaw
Linear eMerge E3-Series devices have a Version Control Failure...
Unrestricted file upload
Linear eMerge 50P/5000P devices allow Unauthenticated File Upload...
Path traversal
Linear eMerge 50P/5000P devices allow Cookie Path Traversal...
Command injection
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution...
CVE-2019-7259
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...
CVE-2019-7259
CVE-2019-7259 affects Nice Linear eMerge E3-Series (firmware 1.00-06 and prior). The vulnerability allows an authorization bypass via a specific GET request, causing disclosure of administrative credentials and full control of the control interface. The issue is part of a broader set of flaws in ...
CVE-2019-7260
Linear eMerge E3-Series devices have Cleartext Credentials in a Database...
CVE-2019-7260
CVE-2019-7260 affects Nice Linear eMerge E3-Series firmware 1.00-06 and prior. The vulnerability is insufficiently protected credentials: passwords stored in plaintext in the device’s database, enabling an attacker to obtain admin credentials and compromise the control interface. Reported CVSS v3...
CVE-2019-7261
The CVE-2019-7261 entry affects Nice/Nortek Linear eMerge E3-Series devices (firmware 1.00-06 and earlier). The root cause is hard-coded credentials, including SSH access to root with embedded credentials, enabling full system compromise. Impact described across sources: remote access with high c...
CVE-2019-7261
Linear eMerge E3-Series devices have Hard-coded Credentials...
CVE-2019-7262
Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7262
CVE-2019-7262 affects Nice Linear eMerge E3-Series devices (firmware 1.00-06 and prior). The vulnerability is Cross-Site Request Forgery (CSRF) in the device’s web interface, caused by insufficient validation of requests from trusted users, enabling an attacker to perform actions with administrat...