PT-2019-18486 · Linear · Linear Emerge E3-Series

Published 2019-07-02 · Updated 2025-11-06 · CVE-2019-7256

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linear eMerge E3-Series versions le1.00-06

Description The issue allows Command Injections. Linear eMerge E3-Series devices are affected. The vulnerability was exploited in the wild, posing significant security risks.

Recommendations For Linear eMerge E3-Series versions le1.00-06, update the firmware to a version that addresses the issue. As a temporary workaround, consider restricting access to vulnerable components until a patch is available.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2019-7256

Affected Products

Linear Emerge E3-Series

References · 36

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linear_emerge_unauth_rce_cve_2019_7256.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/47619 · Exploit
• 🔥 http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html · Exploit
• 🔥 https://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html · Exploit
• 🔥 http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html · Exploit
• 🔥 http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html · Exploit
• https://cisa.gov/news-events/ics-advisories/icsa-24-065-01 · Security Note
• https://linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-7256 · Security Note
• https://osv.dev/vulnerability/CVE-2019-7256 · Vendor Advisory
• https://twitter.com/rst_cloud/status/1854517412780994920 · Twitter Post
• https://t.me/true_secator/5525 · Telegram Post
• https://twitter.com/rst_cloud/status/1837592436966629494 · Twitter Post
• https://twitter.com/OstorlabSec/status/1775195080929779951 · Twitter Post