Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Vulnerability record

CVE-2019-7256

Nice Linear eMerge E3-Series OS Command Injection Vulnerability

CriticalExploitation confirmedCISA KEV
What should I do?

This vulnerability is in the CISA Known Exploited Vulnerabilities catalog: attackers are using it. If you run Linear eMerge E3-Series, fix it now.

CISA required action: Contact the vendor for guidance on remediating firmware, per their advisory.

US federal civilian agencies must remediate by Apr 15, 2024.

Patch status

No official fix confirmed yet

Until a fix ships, follow the vendor's mitigations and CISA's required action, limit exposure of affected systems, and watch this record for a patch.

Description

Linear eMerge E3-Series devices allow Command Injections.

Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.

Affected products

ProductVendorSource
Linear eMerge E3-SeriesNiceKEV

Sources: KEV = CISA Known Exploited Vulnerabilities catalog. Version details have not been published yet.

Intelligence timeline

Developments from the last 30 days, newest first.

  1. CVSS scoredUpdateKEV

    CVE-2019-7256 scored CVSS 9.8: Nice Linear eMerge E3-Series, Nice Linear eMerge E3-Series OS Command Injection Vulnerability

    CISA lists this as exploited in the wild. Unpatched Linear eMerge E3-Series systems are exposed to active attacks now.

    Basis: NIST National Vulnerability Database

1 earlier event is available with a subscription. See plans.

Coverage

We have not published a story about this vulnerability yet.

References

  • linear-solutions.com https://linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf
  • cisa.gov https://www.cisa.gov/news-events/ics-advisories/icsa-24-065-01
  • nvd.nist.gov https://nvd.nist.gov/vuln/detail/CVE-2019-7256
  • packetstormsecurity.com http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html
  • packetstormsecurity.com http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.h…
  • packetstormsecurity.com http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html
  • packetstormsecurity.com http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html
  • applied-risk.com https://applied-risk.com/labs/advisories
  • applied-risk.com https://www.applied-risk.com/resources/ar-2019-005
  • cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7256