CVE-2019-7256

Linear eMerge E3-Series devices allow Command Injections...

CVE-2019-7253

Linear eMerge E3-Series devices allow Directory Traversal...

CVE-2019-7252

Linear eMerge E3-Series devices have Default Credentials...

CVE-2019-7253

Linear eMerge E3-Series devices allow Directory Traversal...

CVE-2019-7252

Linear eMerge E3-Series devices have Default Credentials...

Privilege escalation

Linear eMerge E3-Series devices allow Privilege Escalation...

Design/Logic Flaw

Linear eMerge E3-Series devices allow File Inclusion...

Unrestricted file upload

Linear eMerge E3-Series devices allow Unrestricted File Upload...

Command injection

Linear eMerge E3-Series devices allow Command Injections...

Directory traversal

Linear eMerge E3-Series devices allow Directory Traversal...

Cross site scripting

Linear eMerge E3-Series devices allow XSS...

CVE-2019-7252

Linear eMerge E3-Series devices have Default Credentials...

CVE-2019-7252

CVE-2019-7252 affects Nortek/Nortek Security & Control Linear eMerge E3-Series devices. The connected sources confirm a trust-management issue enabling default credentials to be used by an attacker, potentially leading to privilege escalation and root access. Public records reference default-pass...

CVE-2019-7253

Linear eMerge E3-Series devices allow Directory Traversal...

CVE-2019-7253

CVE-2019-7253 affects Nice Linear eMerge E3-Series firmware 1.00-06 and prior, where improper limitation of a pathname to a restricted directory (path traversal) can enable a remote attacker to access restricted files and user data. The Red Hat advisory and CISA/ICS sources confirm a high-severit...

CVE-2019-7254

Linear eMerge E3-Series devices allow File Inclusion...

CVE-2019-7254

CVE-2019-7254 affects Linear eMerge E3-Series firmware versions 1.00-06 and earlier. The connected sources explicitly describe a Local File Inclusion via directory traversal in the web interface, enabling an unauthenticated or low-privilege attacker to access restricted files (e.g., via a crafted...

CVE-2019-7255

Linear eMerge E3-Series devices allow XSS...

CVE-2019-7255

CVE-2019-7255 affects Linear eMerge E3-Series devices. The Nuclei template documents a Cross-Site Scripting (XSS) vulnerability exploitable via the layout parameter in the web interface (e.g., badge_template_v0.php?layout=...). Impact: attacker can execute arbitrary script in a user’s browser, wi...

CVE-2019-7257

The connected ICS advisory confirms CVE-2019-7257 affects Nice Linear eMerge E3-Series devices (firmware 1.00-06 and earlier). The vulnerability is Unrestricted Upload of a File with Dangerous Type, enabling remote code execution by uploading a malicious file to the device’s web root. MITRE CVSS ...