CVE Feed

    Dashboard / CVE / CVE-2019-7256

    CVE-2019-7256

    Linear eMerge E3-Series devices allow Command Injections.

    Published:Jul 2, 2019
    Last Modified:Nov 6, 2025
    EPS:Jul 2, 2019
    EPSS Score:0.94406
    CVSS Score:9.8

    CISA Notification

    Description

    Linear eMerge E3-Series devices allow Command Injections.

    Required Action:

    Contact the vendor for guidance on remediating firmware, per their advisory.

    Notes:

    No extra notes provided.

    Due Date
    Apr 15, 2024
    879 days ago
    Alert Date
    Mar 25, 2024
    900 days ago

    Affected Products

    Vendor
    Nortekcontrol
    Product
    Linear Emerge Elite
    Vendor
    Nortekcontrol
    Product
    Linear Emerge Elite Firmware
    Vendor
    Nortekcontrol
    Product
    Linear Emerge Essential
    Vendor
    Nortekcontrol
    Product
    Linear Emerge Essential Firmware

    Exploits

    http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.htmlhttp://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.htmlhttp://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.htmlhttp://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.htmlhttp://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.htmlhttp://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.htmlhttp://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.htmlhttp://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.htmlhttps://www.exploit-db.com/exploits/47619

    Related CVEs

    CVE-2019-7252 (CVSS 9.8) — Linear eMerge E3-Series devices have Default Credentials.…
    CVE-2019-7253 (CVSS 9.8) — Linear eMerge E3-Series devices allow Directory Traversal.…
    CVE-2019-7254 (CVSS 7.5) — Linear eMerge E3-Series devices allow File Inclusion.…
    CVE-2019-7255 (CVSS 6.1) — Linear eMerge E3-Series devices allow XSS.…
    CVE-2019-7257 (CVSS 10) — Linear eMerge E3-Series devices allow Unrestricted File Upload.…
    CVE-2019-7258 (CVSS 8.8) — Linear eMerge E3-Series devices allow Privilege Escalation.…
    CVE-2019-7259 (CVSS 8.8) — Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.…
    CVE-2019-7260 (CVSS 9.8) — Linear eMerge E3-Series devices have Cleartext Credentials in a Database.…
    CVE-2019-7261 (CVSS 9.8) — Linear eMerge E3-Series devices have Hard-coded Credentials.…
    CVE-2019-7262 (CVSS 8.8) — Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).…

    References

    http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html
    http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html
    http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html
    http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html
    https://applied-risk.com/labs/advisories
    https://www.applied-risk.com/resources/ar-2019-005
    http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html
    http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html
    http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html
    http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html
    https://applied-risk.com/labs/advisories
    https://www.applied-risk.com/resources/ar-2019-005
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7256

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High