What’s Vulnerable › Vulnerabilities
CVE-2019-7256: Nice Linear eMerge E3-Series OS Command Injection Vulnerability
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: yes — in CISA KEV since 2024-03-25
- EPSS: 97.1% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-07-02 · updated 2026-06-17
- Weakness: CWE-78
Description
Linear eMerge E3-Series devices allow Command Injections.
Affected products
- Nortekcontrol Linear Emerge Elite Firmware: through 1.00-06
- Nortekcontrol Linear Emerge Essential Firmware: through 1.00-06
References
- http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html
- http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html
- http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html
- http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html
- https://applied-risk.com/labs/advisories
- https://www.applied-risk.com/resources/ar-2019-005
- http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html
- http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html
- http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html
- http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html
- https://applied-risk.com/labs/advisories
- https://www.applied-risk.com/resources/ar-2019-005
Get alerted when CVE-2019-7256 or the next vulnerability affects your stack