Vulnerability Details CVE-2019-7262
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.568
EPSS Ranking 98.0%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.8
References
- http://packetstormsecurity.com/files/155263/Nortek-Linear-eMerge-E3-Access-Control-Cross-Site-Request-Forgery.html
- https://applied-risk.com/labs/advisories
- https://www.applied-risk.com/resources/ar-2019-005
- http://packetstormsecurity.com/files/155263/Nortek-Linear-eMerge-E3-Access-Control-Cross-Site-Request-Forgery.html
- https://applied-risk.com/labs/advisories
- https://www.applied-risk.com/resources/ar-2019-005
Products affected by CVE-2019-7262
-
cpe:2.3:h:nortekcontrol:linear_emerge_elite:-
-
cpe:2.3:h:nortekcontrol:linear_emerge_essential:-
-
cpe:2.3:o:nortekcontrol:linear_emerge_elite_firmware:1.00-06
-
cpe:2.3:o:nortekcontrol:linear_emerge_essential_firmware:1.00-06