← Vulnerability feed
Start free
Open in platform
Vulnerability record · CVE-2019-7258 · published 2 July 2019
CVE-2019-7258: Nortekcontrol linear emerge essential firmware incorrect authorization vulnerability
Nortekcontrol · Linear Emerge Essential Firmware
Linear eMerge E3-Series devices allow Privilege Escalation.
8.8 CVSS 3.1 High EPSS 20% · top 2.7% CWE-863 · Incorrect authorization
8.8CVSS 3.1 base score, v2 6.5
20%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References, 2 tagged exploit
17 Jun 2026Last modified by NVD
Description
Linear eMerge E3-Series devices allow Privilege Escalation.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://packetstormsecurity.com/files/155260/Linear-eMerge-E3-1.00-06-Privilege-Escalation.html | ExploitThird Party AdvisoryVDB Entry |
| https://applied-risk.com/labs/advisories | Not ApplicableThird Party Advisory |
| https://www.applied-risk.com/resources/ar-2019-005 | Third Party Advisory |
| http://packetstormsecurity.com/files/155260/Linear-eMerge-E3-1.00-06-Privilege-Escalation.html | ExploitThird Party AdvisoryVDB Entry |
| https://applied-risk.com/labs/advisories | Not ApplicableThird Party Advisory |
| https://www.applied-risk.com/resources/ar-2019-005 | Third Party Advisory |
Track CVE-2019-7258 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
9.8CVE-2019-7256Linear eMerge E3-Series access controllers OS command injectionLinear eMerge E3-Series access controller firmware is vulnerable to OS command injection (CWE-78), allowing commands to be run on the device. The fla…KEVEPSS 97%analysed10.0CVE-2019-7257Linear eMerge E3-Series unrestricted file uploadLinear eMerge E3-Series devices accept unrestricted file uploads, allowing an attacker to place arbitrary files on the system. Because the uploaded c…EPSS 70%analysed9.8CVE-2019-7252Nortekcontrol linear emerge essential firmware insecure default initialization vulnerabilityLinear eMerge E3-Series devices have Default Credentials.EPSS 4.9%9.8CVE-2019-7253Nortekcontrol linear emerge essential firmware path traversal vulnerabilityLinear eMerge E3-Series devices allow Directory Traversal.EPSS 3.0%9.8CVE-2019-7260Nortekcontrol linear emerge essential firmware insufficiently protected credentials vulnerabilityLinear eMerge E3-Series devices have Cleartext Credentials in a Database.EPSS 6.6%9.8CVE-2019-7261Nortekcontrol linear emerge essential firmware hard-coded credentials vulnerabilityLinear eMerge E3-Series devices have Hard-coded Credentials.EPSS 5.5%9.8CVE-2019-7264Nortekcontrol linear emerge essential firmware out-of-bounds write vulnerabilityLinear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.EPSS 2.2%9.8CVE-2019-7265Nortekcontrol linear emerge essential firmware hard-coded credentials vulnerabilityLinear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).EPSS 23%
Source: NIST National Vulnerability Database (record CVE-2019-7258), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
