Linear Emerge 50p CVEs and Security Vulnerabilities

CVE-2019-7271

Nortek Linear eMerge 50P/5000P devices have Default Credentials.

CVSS 3.0 · 9.8 Critical EPSS 3.6% KEV · Not listed

Vendors

Nortekcontrol

Products

Linear Emerge 5000p Linear Emerge 5000p Firmware Linear Emerge 50p and 1 more

CVE-2019-7270

Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed

Vendors

Nortekcontrol

Products

Linear Emerge 5000p Linear Emerge 5000p Firmware Linear Emerge 50p and 1 more

CVE-2019-7269

Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.

CVSS 3.1 · 9.8 Critical EPSS 40.0% KEV · Not listed

Vendors

Nortekcontrol

Products

Linear Emerge 5000p Linear Emerge 5000p Firmware Linear Emerge 50p and 1 more

CVE-2019-7268

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.

CVSS 3.1 · 10.0 Critical EPSS 6.5% KEV · Not listed

Vendors

Nortekcontrol

Products

Linear Emerge 5000p Linear Emerge 5000p Firmware Linear Emerge 50p and 1 more

CVE-2019-7267

Linear eMerge 50P/5000P devices allow Cookie Path Traversal.

CVSS 3.1 · 9.8 Critical EPSS 21.5% KEV · Not listed

Vendors

Nortekcontrol

Products

Linear Emerge 5000p Linear Emerge 5000p Firmware Linear Emerge 50p and 1 more

CVE-2019-7266

Linear eMerge 50P/5000P devices allow Authentication Bypass.

CVSS 3.1 · 9.8 Critical EPSS 4.6% KEV · Not listed

Vendors

Nortekcontrol

Products

Linear Emerge 5000p Linear Emerge 5000p Firmware Linear Emerge 50p and 1 more