Skip to content
OpenAdvisories
Critical 1 exploited CVE ICSA-24-065-01 12 CVEs

Nice Linear eMerge E3-Series

Published Mar 5, 2024 · Updated Mar 5, 2024

Vendor: NICE Product: Linear eMerge E3-Series

Summary

Successful exploitation of these vulnerabilities could allow a remote attacker to gain full system access.

Vulnerabilities 12

  • Critical 9.8
    CVE-2019-7256 Exploited Public exploit Scanner template EPSS 97%

    Linear eMerge E3-Series devices allow Command Injections.

    KEV Mar 25, 2024
  • Unscored —
    CVE-2019-7253

    Linear eMerge E3-Series devices allow Directory Traversal.

  • Unscored —
    CVE-2019-7254 Public exploit Scanner template EPSS 82%

    Linear eMerge E3-Series devices allow File Inclusion.

  • Unscored —
    CVE-2019-7255 Public exploit Scanner template EPSS 56%

    Linear eMerge E3-Series devices allow XSS.

  • Unscored —
    CVE-2019-7257 Public exploit EPSS 70%

    Linear eMerge E3-Series devices allow Unrestricted File Upload.

  • Unscored —
    CVE-2019-7258 EPSS 19%

    Linear eMerge E3-Series devices allow Privilege Escalation.

  • Unscored —
    CVE-2019-7259 EPSS 13%

    Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.

  • Unscored —
    CVE-2019-7260

    Linear eMerge E3-Series devices have Cleartext Credentials in a Database.

  • Unscored —
    CVE-2019-7261

    Linear eMerge E3-Series devices have Hard-coded Credentials.

  • Unscored —
    CVE-2019-7262 Public exploit EPSS 16%

    Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).

  • Unscored —
    CVE-2019-7264

    Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.

  • Unscored —
    CVE-2019-7265 Public exploit EPSS 23%

    Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).

Revision history

  1. #1

    Initial Publication

References