Skip to content
OpenAdvisories
Critical ICSA-20-184-01 5 CVEs

Nortek Linear eMerge 50P/5000P

Published Jul 2, 2020 · Updated Jul 2, 2020

Vendor: Nortek Product: Linear eMerge 50P/5000P

Summary

Successful exploitation of these vulnerabilities could allow a remote attacker to gain full system access.

Vulnerabilities 5

  • Unscored —
    CVE-2019-7266

    Linear eMerge 50P/5000P devices allow Authentication Bypass.

  • Unscored —
    CVE-2019-7267 EPSS 21%

    Linear eMerge 50P/5000P devices allow Cookie Path Traversal.

  • Unscored —
    CVE-2019-7268

    Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.

  • Unscored —
    CVE-2019-7269 Public exploit EPSS 40%

    Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.

  • Unscored —
    CVE-2019-7270

    Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).

Revision history

  1. #1

    ICSA-20-184-01 Nortek Linear eMerge 50P-5000P

References