The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not properly prevent downloading of database backups, which allows remote attackers to obtain sensitive information via requests for full_*.dar files with predictable filenames.
AV:N/AC:L/Au:N/C:P/I:N/A:NLinearcorp Emerge 50
HWLinearcorpall versionsLinearcorp Emerge 5000
HWLinearcorpall versionsS2sys Netbox
HWS2Sys2.53.3Sonitrol Eaccess
HWSonitrolall versions
Related vulnerabilities
The S2 Security NetBox 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, uses a ...
The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, s...
The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAcces...
The Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which makes it easi...
Unspecified vulnerability in the management console in the S2 Security Linear eMerge Access Control System 2.5...