Nortekcontrol Linear Emerge Essential Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Nortekcontrol Linear Emerge Essential Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2019-7257 — CVSS 10.0 (critical): Linear eMerge E3-Series devices allow Unrestricted File Upload.
• CVE-2019-7253 — CVSS 9.8 (critical): Linear eMerge E3-Series devices allow Directory Traversal.
• CVE-2019-7252 — CVSS 9.8 (critical): Linear eMerge E3-Series devices have Default Credentials.
• CVE-2019-7260 — CVSS 9.8 (critical): Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
• CVE-2019-7261 — CVSS 9.8 (critical): Linear eMerge E3-Series devices have Hard-coded Credentials.
• CVE-2019-7263 — CVSS 9.8 (critical): Linear eMerge E3-Series devices have a Version Control Failure.
• CVE-2019-7264 — CVSS 9.8 (critical): Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.
• CVE-2019-7265 — CVSS 9.8 (critical): Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
• CVE-2019-7256 — CVSS 9.8 (critical) — actively exploited: Linear eMerge E3-Series devices allow Command Injections.
• CVE-2019-7262 — CVSS 8.8 (high): Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
• CVE-2019-7258 — CVSS 8.8 (high): Linear eMerge E3-Series devices allow Privilege Escalation.
• CVE-2019-7259 — CVSS 8.8 (high): Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
• CVE-2019-7254 — CVSS 7.5 (high): Linear eMerge E3-Series devices allow File Inclusion.
• CVE-2019-7255 — CVSS 6.1 (medium): Linear eMerge E3-Series devices allow XSS.