Vulnerabilities

TI-2019-05156 CVE-2019-7266 · GHSA-84xp-5pqj-58wv

Linear eMerge 50P/5000P devices allow Authentication Bypass.

MEDIUM 50

Linear eMerge 50P/5000P devices allow Authentication Bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04635 Published 2019-07-02 No fix listed CWE-565

TI-2019-05157 CVE-2019-7267 · GHSA-jvcr-78c8-qm6v

MEDIUM 61

Linear eMerge 50P/5000P devices allow Cookie Path Traversal.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.21455 Published 2019-07-02 No fix listed CWE-22

TI-2019-05158 CVE-2019-7268 · GHSA-cccq-r4fh-564m

MEDIUM 52

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.06477 Published 2019-07-02 No fix listed CWE-434

TI-2019-05159 CVE-2019-7269 · GHSA-48f7-vhp5-98fr

HIGH 70

Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.40005 Published 2019-07-02 No fix listed CWE-78

TI-2019-05160 CVE-2019-7270 · GHSA-75wm-hfq9-qgpc

MEDIUM 40

Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0114 Published 2019-07-02 No fix listed CWE-352

TI-2019-05161 CVE-2019-7271 · GHSA-43xm-v588-p23q

MEDIUM 48

Nortek Linear eMerge 50P/5000P devices have Default Credentials.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03553 Published 2019-07-01 No fix listed CWE-522