CVE-2019-7256
Nice Linear eMerge E3-Series OS Command Injection Vulnerability
Published Jul 2, 2019 · updated Jun 16, 2026 · nortekcontrol linear emerge essential firmware
Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.
Timeline
Detection, updates, and resolution for this record.
Jul 2, 2019 · Catalog
Detected
Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.
Mar 25, 2024 · CISA KEV
Known exploited
Contact the vendor for guidance on remediating firmware, per their advisory.
Apr 15, 2024 · CISA KEV
Remediation due
Contact the vendor for guidance on remediating firmware, per their advisory.
Jun 16, 2026 · Catalog
Updated
Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.
Required action
Contact the vendor for guidance on remediating firmware, per their advisory.
CISA due date Apr 15, 2024
Affected
- cpe nortekcontrol/linear emerge elite firmwareversion unspecified
- cpe nortekcontrol/linear emerge essential firmwareversion unspecified
- vendor Nice Linear eMerge E3-Seriesversion unspecified
Sources
- CISA KEVCVE-2019-7256
Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.
cisa.gov - CVE.orgCVE-2019-7256
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-7256
30-day exploitation probability 97.1%
first.org - Exploit Database47619
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_linux/http/linear_emerge_unauth_rce_cve_2019_7256
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2019-7256
Linear eMerge E3-Series devices allow Command Injections.
nvd.nist.gov - Packet Storm Securityhttp://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html
Packet Storm link already published on the finding.
packetstormsecurity.com - Packet Storm Securityhttp://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html
Packet Storm link already published on the finding.
packetstormsecurity.com - Packet Storm Securityhttp://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html
Packet Storm link already published on the finding.
packetstormsecurity.com - Packet Storm Securityhttp://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html
Packet Storm link already published on the finding.
packetstormsecurity.com