HIGH🇵🇱 Wersja polska

CVE-2019-7270

CVSS 8.8v3.1pub. 2019-07-02upd. 2024-11-21

Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Nortekcontrol Linear Emerge 5000p

    HW
    Nortekcontrol
    all versions

  • Nortekcontrol Linear Emerge 5000p Firmware

    OS
    Nortekcontrol
    ≤ 4.6.07

  • Nortekcontrol Linear Emerge 50p

    HW
    Nortekcontrol
    all versions

  • Nortekcontrol Linear Emerge 50p Firmware

    OS
    Nortekcontrol
    ≤ 4.6.07
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-7266CRITICAL9.8PL ✓same product

Pominięcie uwierzytelniania w urządzeniach Linear eMerge 50P/5000P

CVE-2019-7267CRITICAL9.8PL ✓same product

Path Traversal w cookie w urządzeniach Linear eMerge 50P/5000P

CVE-2019-7268CRITICAL10.0PL ✓same product

Nieuwierzytelnione przesyłanie plików w Linear eMerge 50P/5000P

CVE-2019-7269CRITICAL9.8PL ✓same product

Command Injection z wykonaniem kodu jako root w Linear eMerge 50P/5000P

CVE-2019-7271CRITICAL9.8PL ✓same product

Domyślne dane uwierzytelniające w urządzeniach Nortek Linear eMerge 50P/5000P