← Vulnerability feed
Start free
Open in platform
Vulnerability record · CVE-2019-7253 · published 2 July 2019
CVE-2019-7253: Nortekcontrol linear emerge essential firmware path traversal vulnerability
Nortekcontrol · Linear Emerge Essential Firmware
Linear eMerge E3-Series devices allow Directory Traversal.
9.8 CVSS 3.0 Critical EPSS 3.0% · top 13.1% CWE-22 · Path traversal
9.8CVSS 3.0 base score, v2 7.5
3.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD
Description
Linear eMerge E3-Series devices allow Directory Traversal.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://applied-risk.com/labs/advisories | Third Party Advisory |
| https://www.applied-risk.com/resources/ar-2019-005 | Third Party Advisory |
| https://applied-risk.com/labs/advisories | Third Party Advisory |
| https://www.applied-risk.com/resources/ar-2019-005 | Third Party Advisory |
Track CVE-2019-7253 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
9.8CVE-2019-7256Linear eMerge E3-Series access controllers OS command injectionLinear eMerge E3-Series access controller firmware is vulnerable to OS command injection (CWE-78), allowing commands to be run on the device. The fla…KEVEPSS 97%analysed10.0CVE-2019-7257Linear eMerge E3-Series unrestricted file uploadLinear eMerge E3-Series devices accept unrestricted file uploads, allowing an attacker to place arbitrary files on the system. Because the uploaded c…EPSS 70%analysed9.8CVE-2019-7252Nortekcontrol linear emerge essential firmware insecure default initialization vulnerabilityLinear eMerge E3-Series devices have Default Credentials.EPSS 4.9%9.8CVE-2019-7260Nortekcontrol linear emerge essential firmware insufficiently protected credentials vulnerabilityLinear eMerge E3-Series devices have Cleartext Credentials in a Database.EPSS 6.6%9.8CVE-2019-7261Nortekcontrol linear emerge essential firmware hard-coded credentials vulnerabilityLinear eMerge E3-Series devices have Hard-coded Credentials.EPSS 5.5%9.8CVE-2019-7264Nortekcontrol linear emerge essential firmware out-of-bounds write vulnerabilityLinear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.EPSS 2.2%9.8CVE-2019-7265Nortekcontrol linear emerge essential firmware hard-coded credentials vulnerabilityLinear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).EPSS 23%9.8CVE-2019-7263Nortekcontrol linear emerge essential firmware vulnerabilityLinear eMerge E3-Series devices have a Version Control Failure.EPSS 1.8%
Source: NIST National Vulnerability Database (record CVE-2019-7253), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.
