PT-2010-1298 · S2 Security · S2 Security Linear Emerge Access Control System

Shawn Merdinger · Published 2010-01-05 · Updated 2010-06-29 · CVE-2009-3734

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions S2 Security Linear eMerge Access Control System versions 2.5.x

Description The issue allows remote attackers to cause a denial of service, resulting in a configuration reset, by sending a request to a crafted URI.

Recommendations For versions 2.5.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2009-3734

Affected Products

S2 Security Linear Emerge Access Control System

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2009-3734 · Security Note
• http://blip.tv/file/3414004 · Note
• http://kb.cert.org/vuls/id/571629 · Note
• http://kb.cert.org/vuls/id/WDON-7ZDNNZ · Note
• http://slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon · Note
• http://kb.cert.org/vuls/id/WDON-7ZDNNE · Note