TI-2019-05146 CVE-2019-7256 · GHSA-24pq-phfq-785f
Linear eMerge E3-Series devices allow Command Injections.
Priority CRITICAL 100KEV
Linear eMerge E3-Series devices allow Command Injections.
Nortekcontrol
Records24All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
Nortekcontrol records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
24 records
TI-2019-05147 CVE-2019-7257 · GHSA-gfxc-m887-jprx
Linear eMerge E3-Series devices allow Unrestricted File Upload.
Priority HIGH 80
Linear eMerge E3-Series devices allow Unrestricted File Upload.
TI-2022-13424 CVE-2022-31499 · GHSA-jw4j-j3xr-4wff
Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker…
Priority HIGH 78
Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo.
TI-2019-05144 CVE-2019-7254 · GHSA-j85c-g589-f83h
Linear eMerge E3-Series devices allow File Inclusion.
Priority HIGH 73
Linear eMerge E3-Series devices allow File Inclusion.
TI-2019-05159 CVE-2019-7269 · GHSA-48f7-vhp5-98fr
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.
Priority HIGH 70
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.
TI-2019-05155 CVE-2019-7265 · GHSA-54x8-94pc-hjr8
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
Priority MEDIUM 62
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
TI-2019-05157 CVE-2019-7267 · GHSA-jvcr-78c8-qm6v
Linear eMerge 50P/5000P devices allow Cookie Path Traversal.
Priority MEDIUM 61
Linear eMerge 50P/5000P devices allow Cookie Path Traversal.
TI-2019-05145 CVE-2019-7255 · GHSA-37vh-26pf-5298
Linear eMerge E3-Series devices allow XSS.
Priority MEDIUM 60
Linear eMerge E3-Series devices allow XSS.
TI-2019-05148 CVE-2019-7258 · GHSA-wxh7-crxj-886h
Linear eMerge E3-Series devices allow Privilege Escalation.
Priority MEDIUM 56
Linear eMerge E3-Series devices allow Privilege Escalation.
TI-2019-05152 CVE-2019-7262 · GHSA-2gh2-2xq4-xqwf
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
Priority MEDIUM 55
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
TI-2019-05158 CVE-2019-7268 · GHSA-cccq-r4fh-564m
Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.
Priority MEDIUM 52
Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.
TI-2019-05150 CVE-2019-7260 · GHSA-22c7-32gx-23fj
Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
Priority MEDIUM 52
Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
TI-2019-05149 CVE-2019-7259 · GHSA-qv5r-3pww-jqc3
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
Priority MEDIUM 52
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
TI-2019-05156 CVE-2019-7266 · GHSA-84xp-5pqj-58wv
Linear eMerge 50P/5000P devices allow Authentication Bypass.
Priority MEDIUM 50
Linear eMerge 50P/5000P devices allow Authentication Bypass.
TI-2019-05151 CVE-2019-7261 · GHSA-8jgq-23x7-86xm
Linear eMerge E3-Series devices have Hard-coded Credentials.
Priority MEDIUM 50
Linear eMerge E3-Series devices have Hard-coded Credentials.
TI-2019-05142 CVE-2019-7252 · GHSA-jqfj-8wpq-jxw6
Linear eMerge E3-Series devices have Default Credentials.
Priority MEDIUM 50
Linear eMerge E3-Series devices have Default Credentials.
TI-2018-03953 CVE-2018-5439 · GHSA-fwrg-m5rp-3q8j
Command injection in Nortek Linear eMerge E3 Series
Priority MEDIUM 49
A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior.
TI-2019-05161 CVE-2019-7271 · GHSA-43xm-v588-p23q
Nortek Linear eMerge 50P/5000P devices have Default Credentials.
Priority MEDIUM 48
Nortek Linear eMerge 50P/5000P devices have Default Credentials.
TI-2019-05143 CVE-2019-7253 · GHSA-5c2v-q6jp-4mw6
Linear eMerge E3-Series devices allow Directory Traversal.
Priority MEDIUM 48
Linear eMerge E3-Series devices allow Directory Traversal.
TI-2022-13302 CVE-2022-31269 · GHSA-3w88-gmx5-rx4v
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in…
Priority MEDIUM 46
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors.
TI-2019-05154 CVE-2019-7264 · GHSA-r3xv-2c38-xgr5
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.
Priority MEDIUM 46
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.
TI-2019-05153 CVE-2019-7263 · GHSA-h282-9fm8-ggxp
Linear eMerge E3-Series devices have a Version Control Failure.
Priority MEDIUM 46
Linear eMerge E3-Series devices have a Version Control Failure.
TI-2019-05160 CVE-2019-7270 · GHSA-75wm-hfq9-qgpc
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).
Priority MEDIUM 40
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).
TI-2022-13690 CVE-2022-31798 · GHSA-vfqv-5hjq-5j8p
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to…
Priority LOW 39
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together.