critical9.8Public exploit code
CVE-2019-7265
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- eMerge E3 Access Controller 4.6.07 - Remote Code Execution2019-11-12 · remote · hardware
Impact
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nortekcontrol | Linear Emerge Essential Firmware | through 1.00-06 |
| Nortekcontrol | Linear Emerge Elite Firmware | through 1.00-06 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155267/Nortek-Linear-eMerge-E3-Access-Controller-1.00-06-SSH-FTP-Remote-Root.html
- https://applied-risk.com/labs/advisories
- https://www.applied-risk.com/resources/ar-2019-005
- http://packetstormsecurity.com/files/155267/Nortek-Linear-eMerge-E3-Access-Controller-1.00-06-SSH-FTP-Remote-Root.html
- https://applied-risk.com/labs/advisories
- https://www.applied-risk.com/resources/ar-2019-005