ICSA-20-184-01

icsaUScisa_csaf_ot

Nortek Linear eMerge 50P/5000P

view advisory published 2020-07-02

Successful exploitation of these vulnerabilities could allow a remote attacker to gain full system access.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2019-7270UShigh8.8—
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).
CVE-2019-7269UScritical9.8Exploit
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.
CVE-2019-7268UScritical10.0—
Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.
CVE-2019-7267UScritical9.8—
Linear eMerge 50P/5000P devices allow Cookie Path Traversal.
CVE-2019-7266UScritical9.8—
Linear eMerge 50P/5000P devices allow Authentication Bypass.
02

references

External citations — patches, advisories, analysis.

03

remediations (5)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan