CVE-2019-7256
KEVNice Linear eMerge E3-Series OS Command Injection Vulnerability
Description
Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.
Linear eMerge E3-Series devices allow Command Injections.
CVSS 3.1 vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HPublishedJul 2, 2019
Last modifiedJun 17, 2026
Added to KEVMar 25, 2024
Remediation dueApr 15, 2024
References
- packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.htmlExploitThird Party Advisory
- packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.htmlExploitThird Party Advisory
- packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.htmlExploitThird Party Advisory
- packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.htmlExploitThird Party Advisory
- applied-risk.com/labs/advisoriesNot Applicable
- applied-risk.com/resources/ar-2019-005Third Party Advisory
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7256US Government Resource
0 recent articles mention this CVE
89
Risk assessment · Critical
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 925 days
- CVSS
- 9.8 CRITICAL
- EPSS (30-day exploit probability)
- 97.1% · top 1% of all CVEs
- Weakness
- CWE-78
- Attack vector
- Network, remotely reachable
- Preconditions
- No privileges and no user interaction
Recommended actions
- 1.Contact the vendor for guidance on remediating firmware, per their advisory.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Review exposure: confirm which instances are reachable from the internet and restrict access until patched.
- 4.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.