Linear Emerge Essential Firmware Security Vulnerabilities - November

CVE-2019-7252

Linear eMerge E3-Series devices have Default Credentials.

CVE-2019-7253

Linear eMerge E3-Series devices allow Directory Traversal.

CVE-2019-7254

Linear eMerge E3-Series devices allow File Inclusion.

CVE-2019-7255

Linear eMerge E3-Series devices allow XSS.

CVE-2019-7256

Linear eMerge E3-Series devices allow Command Injections.

CVE-2019-7257

Linear eMerge E3-Series devices allow Unrestricted File Upload.

CVE-2019-7258

Linear eMerge E3-Series devices allow Privilege Escalation.

CVE-2019-7259

Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.

CVE-2019-7260

Linear eMerge E3-Series devices have Cleartext Credentials in a Database.

CVE-2019-7261

Linear eMerge E3-Series devices have Hard-coded Credentials.

CVE-2019-7262

Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).

CVE-2019-7263

Linear eMerge E3-Series devices have a Version Control Failure.

CVE-2019-7264

Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.

CVE-2019-7265

Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).