ICSA-24-065-01

Nice Linear eMerge E3-Series

view advisory published 2024-03-05

Successful exploitation of these vulnerabilities could allow a remote attacker to gain full system access.

describes (12)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-7258US	high8.8OT elevated	19.3% (97th)	—	2019-07-02
Linear eMerge E3-Series devices allow Privilege Escalation.
CVE-2019-7257US	critical10.0	70.0% (99th)	Exploit	2019-07-02
Linear eMerge E3-Series devices allow Unrestricted File Upload.
CVE-2019-7256US	critical9.8OT critical	97.1% (100th)	KEV	2019-07-02
Linear eMerge E3-Series devices allow Command Injections.
CVE-2019-7255US	medium6.1	55.8% (99th)	Exploit	2019-07-02
Linear eMerge E3-Series devices allow XSS.
CVE-2019-7254US	high7.5	81.9% (100th)	Exploit	2019-07-02
Linear eMerge E3-Series devices allow File Inclusion.
CVE-2019-7253US	critical9.8	3.01% (87th)	—	2019-07-02
Linear eMerge E3-Series devices allow Directory Traversal.
CVE-2019-7262US	high8.8	16.3% (97th)	Exploit	2019-07-02
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
CVE-2019-7261US	critical9.8OT elevated	5.47% (93rd)	—	2019-07-02
Linear eMerge E3-Series devices have Hard-coded Credentials.
CVE-2019-7260US	critical9.8	6.63% (94th)	—	2019-07-02
Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
CVE-2019-7259US	high8.8	12.9% (96th)	—	2019-07-02
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
CVE-2019-7265US	critical9.8OT high	23.1% (98th)	Exploit	2019-07-02
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
CVE-2019-7264US	critical9.8	2.19% (82nd)	—	2019-07-02
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.