Credit: Gjoko Krstic (Zero Science Lab)
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2019-7256 KEV | CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | 10.0 Critical |
Nice Linear eMerge E3-Series versions 1.00-06 and prior are vulnerable to OS command injection, which could allow an attacker to cause remote code execution. Mitigation: Nice/Nortek encourages users to upgrade to the latest firmware to mitigate the risk of these vulnerabilities. Please see Nice's E3-Bulletin for more information. ↗ Mitigation: Nice also recommends the following defensive measures to minimize the risk of exploitation of these vulnerabilities: Mitigation: Minimize network exposure of devices, ensuring they are not accessible from the internet. Affected, fixed & timelineAffected:
Mitigation: Place the devices behind firewalls and isolate them from other networks. Mitigation: When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Keep your VPNs as updated as possible. Mitigation: Change default credentials on the device. Mitigation: Change the default IP address of the device. Mitigation: See Nice's Telephone Entry Bulletin for additional information. Mitigation: Users should contact Nice with any questions. |
| CVE-2019-7257 | CWE-434 Unrestricted Upload of File with Dangerous Type | 10.0 Critical |
Nice Linear eMerge E3-Series versions 1.00-06 and prior are vulnerable to unrestricted upload of malicious files, which could allow an attacker to execute arbitrary code. Mitigation: Nice/Nortek encourages users to upgrade to the latest firmware to mitigate the risk of these vulnerabilities. Please see Nice's E3-Bulletin for more information. ↗ Mitigation: Nice also recommends the following defensive measures to minimize the risk of exploitation of these vulnerabilities: Mitigation: Minimize network exposure of devices, ensuring they are not accessible from the internet. Affected, fixed & timelineAffected:
Mitigation: Place the devices behind firewalls and isolate them from other networks. Mitigation: When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Keep your VPNs as updated as possible. Mitigation: Change default credentials on the device. Mitigation: Change the default IP address of the device. Mitigation: See Nice's Telephone Entry Bulletin for additional information. Mitigation: Users should contact Nice with any questions. |
| CVE-2019-7253 | CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 9.8 Critical |
Nice Linear eMerge E3-Series versions 1.00-06 and prior are vulnerable to path traversal. This could allow an attacker to gain unauthorized access to the system and sensitive data. Mitigation: Nice/Nortek encourages users to upgrade to the latest firmware to mitigate the risk of these vulnerabilities. Please see Nice's E3-Bulletin for more information. ↗ Mitigation: Nice also recommends the following defensive measures to minimize the risk of exploitation of these vulnerabilities: Mitigation: Minimize network exposure of devices, ensuring they are not accessible from the internet. Affected, fixed & timelineAffected:
Mitigation: Place the devices behind firewalls and isolate them from other networks. Mitigation: When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Keep your VPNs as updated as possible. Mitigation: Change default credentials on the device. Mitigation: Change the default IP address of the device. Mitigation: See Nice's Telephone Entry Bulletin for additional information. Mitigation: Users should contact Nice with any questions. |
| CVE-2019-7260 | CWE-522 Insufficiently Protected Credentials | 9.8 Critical |
The application of Nice Linear eMerge E3-Series versions 1.00-06 and prior stores passwords in clear-text in its DBMS system. Storing a password in plaintext may result in a system compromise. Mitigation: Nice/Nortek encourages users to upgrade to the latest firmware to mitigate the risk of these vulnerabilities. Please see Nice's E3-Bulletin for more information. ↗ Mitigation: Nice also recommends the following defensive measures to minimize the risk of exploitation of these vulnerabilities: Mitigation: Minimize network exposure of devices, ensuring they are not accessible from the internet. Affected, fixed & timelineAffected:
Mitigation: Place the devices behind firewalls and isolate them from other networks. Mitigation: When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Keep your VPNs as updated as possible. Mitigation: Change default credentials on the device. Mitigation: Change the default IP address of the device. Mitigation: See Nice's Telephone Entry Bulletin for additional information. Mitigation: Users should contact Nice with any questions. |
| CVE-2019-7261 | CWE-798 Use of Hard-coded Credentials | 9.8 Critical |
Hard-coded credentials are present in multiple binaries bundled in the Nice Linear eMerge E3-Series versions 1.00-06 and prior firmware OS. These hard-coded credentials typically create a significant hole that could allow an attacker to bypass the authentication configured by the software administrator. Mitigation: Nice/Nortek encourages users to upgrade to the latest firmware to mitigate the risk of these vulnerabilities. Please see Nice's E3-Bulletin for more information. ↗ Mitigation: Nice also recommends the following defensive measures to minimize the risk of exploitation of these vulnerabilities: Mitigation: Minimize network exposure of devices, ensuring they are not accessible from the internet. Affected, fixed & timelineAffected:
Mitigation: Place the devices behind firewalls and isolate them from other networks. Mitigation: When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Keep your VPNs as updated as possible. Mitigation: Change default credentials on the device. Mitigation: Change the default IP address of the device. Mitigation: See Nice's Telephone Entry Bulletin for additional information. Mitigation: Users should contact Nice with any questions. |
| CVE-2019-7264 | CWE-787 Out-of-bounds Write | 9.8 Critical |
A stack-based buffer overflow exists, affecting several CGI binaries of Nice Linear eMerge E3-Series versions 1.00-06 and prior. The vulnerability is caused due to a boundary error in the processing of a user input, which an attacker could exploit to cause a buffer overflow. Successful exploitation could allow execution of arbitrary code on the affected device. Mitigation: Nice/Nortek encourages users to upgrade to the latest firmware to mitigate the risk of these vulnerabilities. Please see Nice's E3-Bulletin for more information. ↗ Mitigation: Nice also recommends the following defensive measures to minimize the risk of exploitation of these vulnerabilities: Mitigation: Minimize network exposure of devices, ensuring they are not accessible from the internet. Affected, fixed & timelineAffected:
Mitigation: Place the devices behind firewalls and isolate them from other networks. Mitigation: When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Keep your VPNs as updated as possible. Mitigation: Change default credentials on the device. Mitigation: Change the default IP address of the device. Mitigation: See Nice's Telephone Entry Bulletin for additional information. Mitigation: Users should contact Nice with any questions. |
| CVE-2019-7265 | CWE-798 Use of Hard-coded Credentials | 9.8 Critical |
The Nice Linear eMerge E3-Series versions 1.00-06 and prior access control platform has SSH enabled with hardcoded credentials for the root account. This could allow an unauthenticated attacker to initiate a secure connection with highest privileges (root) and gain full system access. Mitigation: Nice/Nortek encourages users to upgrade to the latest firmware to mitigate the risk of these vulnerabilities. Please see Nice's E3-Bulletin for more information. ↗ Mitigation: Nice also recommends the following defensive measures to minimize the risk of exploitation of these vulnerabilities: Mitigation: Minimize network exposure of devices, ensuring they are not accessible from the internet. Affected, fixed & timelineAffected:
Mitigation: Place the devices behind firewalls and isolate them from other networks. Mitigation: When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Keep your VPNs as updated as possible. Mitigation: Change default credentials on the device. Mitigation: Change the default IP address of the device. Mitigation: See Nice's Telephone Entry Bulletin for additional information. Mitigation: Users should contact Nice with any questions. |
| CVE-2019-7258 | CWE-863 Incorrect Authorization | 8.8 High |
Nice Linear eMerge E3-Series versions 1.00-06 and prior suffer from an authorization mechanism vulnerability. This could allow an attacker to escalate privileges and gain full control of the system. Mitigation: Nice/Nortek encourages users to upgrade to the latest firmware to mitigate the risk of these vulnerabilities. Please see Nice's E3-Bulletin for more information. ↗ Mitigation: Nice also recommends the following defensive measures to minimize the risk of exploitation of these vulnerabilities: Mitigation: Minimize network exposure of devices, ensuring they are not accessible from the internet. Affected, fixed & timelineAffected:
Mitigation: Place the devices behind firewalls and isolate them from other networks. Mitigation: When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Keep your VPNs as updated as possible. Mitigation: Change default credentials on the device. Mitigation: Change the default IP address of the device. Mitigation: See Nice's Telephone Entry Bulletin for additional information. Mitigation: Users should contact Nice with any questions. |
| CVE-2019-7259 | CWE-200 Exposure of Sensitive Information to an Unauthorized Actor | 8.8 High |
An authorization bypass occurs in Nice Linear eMerge E3-Series versions 1.00-06 and prior when an authenticated attacker visits a specific GET request against the target, resulting in disclosure of administrative credentials in clear-text. This allows the attacker to re-login with admin privileges and have full access to the control interface. Mitigation: Nice/Nortek encourages users to upgrade to the latest firmware to mitigate the risk of these vulnerabilities. Please see Nice's E3-Bulletin for more information. ↗ Mitigation: Nice also recommends the following defensive measures to minimize the risk of exploitation of these vulnerabilities: Mitigation: Minimize network exposure of devices, ensuring they are not accessible from the internet. Affected, fixed & timelineAffected:
Mitigation: Place the devices behind firewalls and isolate them from other networks. Mitigation: When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Keep your VPNs as updated as possible. Mitigation: Change default credentials on the device. Mitigation: Change the default IP address of the device. Mitigation: See Nice's Telephone Entry Bulletin for additional information. Mitigation: Users should contact Nice with any questions. |
| CVE-2019-7262 | CWE-352 Cross-Site Request Forgery (CSRF) | 8.8 High |
The application of Nice Linear eMerge E3-Series versions 1.00-06 and prior allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. An attacker could exploit this to perform certain actions with administrative privileges if a logged-in user visits a malicious web site. Mitigation: Nice/Nortek encourages users to upgrade to the latest firmware to mitigate the risk of these vulnerabilities. Please see Nice's E3-Bulletin for more information. ↗ Mitigation: Nice also recommends the following defensive measures to minimize the risk of exploitation of these vulnerabilities: Mitigation: Minimize network exposure of devices, ensuring they are not accessible from the internet. Affected, fixed & timelineAffected:
Mitigation: Place the devices behind firewalls and isolate them from other networks. Mitigation: When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Keep your VPNs as updated as possible. Mitigation: Change default credentials on the device. Mitigation: Change the default IP address of the device. Mitigation: See Nice's Telephone Entry Bulletin for additional information. Mitigation: Users should contact Nice with any questions. |
| CVE-2019-7254 | CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 7.5 High |
Versions of Nice Linear eMerge E3-Series firmware 1.00-06 and prior are vulnerable to a file inclusion through path traversal, which could give the attacker access to sensitive information. Mitigation: Nice/Nortek encourages users to upgrade to the latest firmware to mitigate the risk of these vulnerabilities. Please see Nice's E3-Bulletin for more information. ↗ Mitigation: Nice also recommends the following defensive measures to minimize the risk of exploitation of these vulnerabilities: Mitigation: Minimize network exposure of devices, ensuring they are not accessible from the internet. Affected, fixed & timelineAffected:
Mitigation: Place the devices behind firewalls and isolate them from other networks. Mitigation: When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Keep your VPNs as updated as possible. Mitigation: Change default credentials on the device. Mitigation: Change the default IP address of the device. Mitigation: See Nice's Telephone Entry Bulletin for additional information. Mitigation: Users should contact Nice with any questions. |
| CVE-2019-7255 | CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 6.1 Medium |
Nice Linear eMerge E3-Series versions 1.00-06 and prior are vulnerable to cross-site scripting, which could allow an attacker to obtain and alter some information on the system. Mitigation: Nice/Nortek encourages users to upgrade to the latest firmware to mitigate the risk of these vulnerabilities. Please see Nice's E3-Bulletin for more information. ↗ Mitigation: Nice also recommends the following defensive measures to minimize the risk of exploitation of these vulnerabilities: Mitigation: Minimize network exposure of devices, ensuring they are not accessible from the internet. Affected, fixed & timelineAffected:
Mitigation: Place the devices behind firewalls and isolate them from other networks. Mitigation: When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Keep your VPNs as updated as possible. Mitigation: Change default credentials on the device. Mitigation: Change the default IP address of the device. Mitigation: See Nice's Telephone Entry Bulletin for additional information. Mitigation: Users should contact Nice with any questions. |
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2019-7256 | 9.8 Critical | Nice Linear eMerge E3-Series Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution. |
| CVE-2019-7253 | — | n/a n/a Linear eMerge E3-Series devices allow Directory Traversal. |
| CVE-2019-7254 | — | n/a n/a Linear eMerge E3-Series devices allow File Inclusion. |
| CVE-2019-7255 | — | n/a n/a Linear eMerge E3-Series devices allow XSS. |
| CVE-2019-7257 | — | n/a n/a Linear eMerge E3-Series devices allow Unrestricted File Upload. |
| CVE-2019-7258 | — | n/a n/a Linear eMerge E3-Series devices allow Privilege Escalation. |
| CVE-2019-7259 | — | n/a n/a Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure. |
| CVE-2019-7260 | — | n/a n/a Linear eMerge E3-Series devices have Cleartext Credentials in a Database. |
| CVE-2019-7261 | — | n/a n/a Linear eMerge E3-Series devices have Hard-coded Credentials. |
| CVE-2019-7262 | — | n/a n/a Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF). |
| CVE-2019-7264 | — | n/a n/a Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform. |
| CVE-2019-7265 | — | n/a n/a Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH). |
Named by the advisory itself. Each CVE links to its tracked detail page.
Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.