PT-2019-18486 · Linear · Linear Emerge E3-Series

Publicado 2019-07-02 · Atualizado 2025-11-06 · CVE-2019-7256

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linear eMerge E3-Series versions le1.00-06

Description The issue allows Command Injections. Linear eMerge E3-Series devices are affected. The vulnerability was exploited in the wild, posing significant security risks.

Recommendations For Linear eMerge E3-Series versions le1.00-06, update the firmware to a version that addresses the issue. As a temporary workaround, consider restricting access to vulnerable components until a patch is available.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2019-7256

Produtos afetados

Linear Emerge E3-Series

Referências · 36

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linear_emerge_unauth_rce_cve_2019_7256.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/47619 · Exploit
• 🔥 http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html · Exploit
• 🔥 https://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html · Exploit
• 🔥 http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html · Exploit
• 🔥 http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html · Exploit
• https://twitter.com/rst_cloud/status/1854517412780994920 · Publicação no Twitter
• https://t.me/true_secator/5525 · Publicação no Telegram
• https://twitter.com/rst_cloud/status/1837592436966629494 · Publicação no Twitter
• https://twitter.com/OstorlabSec/status/1775195080929779951 · Publicação no Twitter
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7256 · Nota
• https://twitter.com/rst_cloud/status/1852727223599427731 · Publicação no Twitter
• https://t.me/cvenotify/35658 · Publicação no Telegram
• https://twitter.com/NatsarLLC/status/1772629833429688613 · Publicação no Twitter