CVE Feed

    Dashboard / CVE / CVE-2019-7261

    CVE-2019-7261

    Linear eMerge E3-Series devices have Hard-coded Credentials.

    Published:Jul 2, 2019
    Last Modified:Nov 21, 2024
    EPS:Jul 2, 2019
    EPSS Score:0.02641
    CVSS Score:9.8

    Affected Products

    Vendor
    Nortekcontrol
    Product
    Linear Emerge Elite
    Vendor
    Nortekcontrol
    Product
    Linear Emerge Elite Firmware
    Vendor
    Nortekcontrol
    Product
    Linear Emerge Essential
    Vendor
    Nortekcontrol
    Product
    Linear Emerge Essential Firmware

    Exploits

    http://packetstormsecurity.com/files/155267/Nortek-Linear-eMerge-E3-Access-Controller-1.00-06-SSH-FTP-Remote-Root.htmlhttp://packetstormsecurity.com/files/155267/Nortek-Linear-eMerge-E3-Access-Controller-1.00-06-SSH-FTP-Remote-Root.html

    Common Weakness Enumeration

    CWE-798 Use of Hard-coded Credentials

    Related CVEs

    CVE-2019-7252 (CVSS 9.8) — Linear eMerge E3-Series devices have Default Credentials.…
    CVE-2019-7253 (CVSS 9.8) — Linear eMerge E3-Series devices allow Directory Traversal.…
    CVE-2019-7254 (CVSS 7.5) — Linear eMerge E3-Series devices allow File Inclusion.…
    CVE-2019-7255 (CVSS 6.1) — Linear eMerge E3-Series devices allow XSS.…
    CVE-2019-7257 (CVSS 10) — Linear eMerge E3-Series devices allow Unrestricted File Upload.…
    CVE-2019-7258 (CVSS 8.8) — Linear eMerge E3-Series devices allow Privilege Escalation.…
    CVE-2019-7259 (CVSS 8.8) — Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.…
    CVE-2019-7260 (CVSS 9.8) — Linear eMerge E3-Series devices have Cleartext Credentials in a Database.…
    CVE-2019-7262 (CVSS 8.8) — Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).…
    CVE-2019-7263 (CVSS 9.8) — Linear eMerge E3-Series devices have a Version Control Failure.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High