Records24All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
Nortekcontrol records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
14 records in Linear Emerge Essential Firmware · all components
Priority CRITICAL 100KEV
Linear eMerge E3-Series devices allow Command Injections.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.97081 · Published 2019-07-02 · No fix listed CWE-78
Priority HIGH 80
Linear eMerge E3-Series devices allow Unrestricted File Upload.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.69992 · Published 2019-07-02 · No fix listed CWE-434
Priority HIGH 73
Linear eMerge E3-Series devices allow File Inclusion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.81872 · Published 2019-07-02 · No fix listed CWE-22
Priority MEDIUM 62
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.23123 · Published 2019-07-02 · No fix listed CWE-798
Priority MEDIUM 60
Linear eMerge E3-Series devices allow XSS.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.55654 · Published 2019-07-02 · No fix listed CWE-79
Priority MEDIUM 56
Linear eMerge E3-Series devices allow Privilege Escalation.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.19277 · Published 2019-07-02 · No fix listed CWE-863
Priority MEDIUM 55
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.16278 · Published 2019-07-02 · No fix listed CWE-352
Priority MEDIUM 52
Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0663 · Published 2019-07-02 · No fix listed CWE-522
Priority MEDIUM 52
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.12945 · Published 2019-07-02 · No fix listed CWE-200
Priority MEDIUM 50
Linear eMerge E3-Series devices have Hard-coded Credentials.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05467 · Published 2019-07-02 · No fix listed CWE-798
Priority MEDIUM 50
Linear eMerge E3-Series devices have Default Credentials.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04854 · Published 2019-07-02 · No fix listed CWE-1188
Priority MEDIUM 48
Linear eMerge E3-Series devices allow Directory Traversal.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0301 · Published 2019-07-02 · No fix listed CWE-22
Priority MEDIUM 46
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02194 · Published 2019-07-02 · No fix listed CWE-787
Priority MEDIUM 46
Linear eMerge E3-Series devices have a Version Control Failure.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01795 · Published 2019-07-02 · No fix listed CWE-18
Open these records in search →