ICSA-24-065-01

Nice Linear eMerge E3-Series

Advisory ansehen veröffentlicht 2024-03-05

Successful exploitation of these vulnerabilities could allow a remote attacker to gain full system access.

beschreibt (12)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2019-7258US	high8.8OT erhöht	19.3% (97th)	—	2019-07-02
Linear eMerge E3-Series devices allow Privilege Escalation.
CVE-2019-7257US	critical10.0	70.0% (99th)	Exploit	2019-07-02
Linear eMerge E3-Series devices allow Unrestricted File Upload.
CVE-2019-7256US	critical9.8OT kritisch	97.1% (100th)	KEV	2019-07-02
Linear eMerge E3-Series devices allow Command Injections.
CVE-2019-7255US	medium6.1	55.8% (99th)	Exploit	2019-07-02
Linear eMerge E3-Series devices allow XSS.
CVE-2019-7254US	high7.5	81.9% (100th)	Exploit	2019-07-02
Linear eMerge E3-Series devices allow File Inclusion.
CVE-2019-7253US	critical9.8	3.01% (87th)	—	2019-07-02
Linear eMerge E3-Series devices allow Directory Traversal.
CVE-2019-7262US	high8.8	16.3% (97th)	Exploit	2019-07-02
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
CVE-2019-7261US	critical9.8OT erhöht	5.47% (93rd)	—	2019-07-02
Linear eMerge E3-Series devices have Hard-coded Credentials.
CVE-2019-7260US	critical9.8	6.63% (94th)	—	2019-07-02
Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
CVE-2019-7259US	high8.8	12.9% (96th)	—	2019-07-02
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
CVE-2019-7265US	critical9.8OT hoch	23.1% (98th)	Exploit	2019-07-02
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
CVE-2019-7264US	critical9.8	2.19% (82nd)	—	2019-07-02
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

ICS Advisory ICSA-24-065-01 JSONself
Recommended Practicesexternal
ICSA Advisory ICSA-24-065-01 - Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

Behebungen (12)

MitigationLinear eMerge E3-Series
Change default credentials on the device.
MitigationLinear eMerge E3-Series
Change default credentials on the device.
MitigationLinear eMerge E3-Series
Change default credentials on the device.
MitigationLinear eMerge E3-Series
Change default credentials on the device.
MitigationLinear eMerge E3-Series
Change default credentials on the device.
MitigationLinear eMerge E3-Series
Change default credentials on the device.
MitigationLinear eMerge E3-Series
Change default credentials on the device.
MitigationLinear eMerge E3-Series
Change default credentials on the device.
MitigationLinear eMerge E3-Series
Change default credentials on the device.
MitigationLinear eMerge E3-Series
Change default credentials on the device.
MitigationLinear eMerge E3-Series
Change default credentials on the device.
MitigationLinear eMerge E3-Series
Change default credentials on the device.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan