PT-2010-4045 · Linear · Linear Emerge

Published 2010-06-25 · Updated 2010-06-28 · CVE-2010-2469

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linear eMerge versions 50 and 5000

Description The issue allows remote attackers to obtain Video Recorder data by establishing a session to the device, due to the use of a default password for the IEIeMerge account.

Recommendations For Linear eMerge versions 50 and 5000, change the default password of the IEIeMerge account to a strong and unique password to prevent unauthorized access.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2010-2469

Affected Products

Linear Emerge

References · 5

• 🔥 http://blip.tv/file/3414004 · Exploit
• 🔥 http://slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-2469 · Security Note
• http://darkreading.com/blog/archives/2010/04/attacking_door.html · Note
• http://securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2 · Note