peter bassill · operator
$ cve CVE-2019-7256 JSON

CVE-2019-7256 KEV EXPLOIT

9.8
CRITICAL · CVSS 3.1 · EPSS 97.1% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2024-04-15.

Description

Linear eMerge E3-Series devices allow Command Injections.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS97.08% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-78
On CISA KEVyes — remediate by 2024-04-15
Public exploityes
Published2019-07-02
Last modified2026-06-17

CISA KEV

NameNice Linear eMerge E3-Series OS Command Injection Vulnerability
Added2024-03-25
Due2024-04-15
Vendor / productNice / Linear eMerge E3-Series
Ransomware usenone reported

Affected (4)

VendorProduct
nortekcontrollinear emerge elite
nortekcontrollinear emerge elite firmware
nortekcontrollinear emerge essential
nortekcontrollinear emerge essential firmware

Public exploits

SourceTitleDate
exploit-dbeMerge E3 1.00-06 - Remote Code Execution2019-11-12

References

→ the Explorer  ·  watch your stack  ·  NVD