CVEブラウザに戻る

CVE-2019-7268

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0480%

EPSS Percentile35.63th

Published2019年7月2日

Last Modified2024年11月21日

Vulnerability Description

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.

Affected Platforms (CPE)

💻

Nortekcontrol

Linear Emerge 50p Firmware

<= 4.6.07

💻

Nortekcontrol

Linear Emerge 5000p Firmware

<= 4.6.07

References & Advisories

🔗 http://packetstormsecurity.com/files/155250/Linear-eMerge50P-5000P-4.6.07-Remote-Code-Execution.html

🔗 https://applied-risk.com/labs/advisories

🔗 https://www.applied-risk.com/resources/ar-2019-006

🔗 https://www.us-cert.gov/ics/advisories/icsa-20-184-01

🔗 http://packetstormsecurity.com/files/155250/Linear-eMerge50P-5000P-4.6.07-Remote-Code-Execution.html

🔗 https://applied-risk.com/labs/advisories

🔗 https://www.applied-risk.com/resources/ar-2019-006

🔗 https://www.us-cert.gov/ics/advisories/icsa-20-184-01

関連する脆弱性情報

CVE-2019-1170810.0

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the no...

CVE-2019-568410.0

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially crafted shader ...

CVE-2019-954810.0

Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.

CVE-2019-1302010.0

The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF. This has two potential areas for abuse....