Description
Linear eMerge E3-Series devices allow Command Injections.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Linear eMerge E3-Series Access Controller Command Injection
exploit/linux/http/linear_emerge_unauth_rce_cve_2019_7256
Exploit-DB 1
- eMerge E3 1.00-06 - Remote Code Execution EDB-47619 · webapps · Nov 12, 2019
GitHub 1 repository
-
krevetkqqq/CVE-2019-7256 ★ 0 · Oct 30, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- eMerge E3 1.00-06 - Remote Code Execution http/cves/2019/CVE-2019-7256.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- ICSA-24-065-01 Nice Linear eMerge E3-Series CISA ICS & IT advisories · Mar 5, 2024
References
- https://applied-risk.com/labs/advisories
- https://www.applied-risk.com/resources/ar-2019-005
- http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html
- http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html
- http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html
- http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html