NetSight
IP …
critical9.8Known exploitedPublic exploit code

CVE-2019-7256

Nice Linear eMerge E3-Series OS Command Injection Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2024-03-25. Federal due date: 2024-04-15.

Contact the vendor for guidance on remediating firmware, per their advisory.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Linear eMerge E3-Series devices allow Command Injections.

Affected products

VendorProductAffected versions
NortekcontrolLinear Emerge Essential Firmware
through 1.00-06
NortekcontrolLinear Emerge Elite Firmware
through 1.00-06

Weakness classification

CWE-78

References