critical9.8Public exploit code
CVE-2019-7269
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- eMerge50P 5000P 4.6.07 - Remote Code Execution2019-11-12 · webapps · hardware
Impact
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nortekcontrol | Linear Emerge 50p Firmware | through 4.6.07 |
| Nortekcontrol | Linear Emerge 5000p Firmware | through 4.6.07 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155250/Linear-eMerge50P-5000P-4.6.07-Remote-Code-Execution.html
- https://applied-risk.com/labs/advisories
- https://www.applied-risk.com/resources/ar-2019-006
- https://www.us-cert.gov/ics/advisories/icsa-20-184-01
- http://packetstormsecurity.com/files/155250/Linear-eMerge50P-5000P-4.6.07-Remote-Code-Execution.html
- https://applied-risk.com/labs/advisories
- https://www.applied-risk.com/resources/ar-2019-006
- https://www.us-cert.gov/ics/advisories/icsa-20-184-01