nortekcontrol kayıtları
nortekcontrol üreticisine ait 25 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %4
- Silahlaştırılmış
- 1 · %4
- Pre-auth RCE
- 6
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- 1728 gün
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-798 Use of Hard-coded Credentials3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-522 Insufficiently Protected Credentials2
- CWE-352 Cross-Site Request Forgery (CSRF)2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
25 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
98Hemen | CVE-2019-7256Silahlaştırılmış | Linear eMerge E3-Series devices allow Command Injections.nortekcontrol · linear emerge essential firmware · CWE-78 | Kritik9,8 | KEV | %97,1 | 2 Tem 2019 |
61Bu hafta | CVE-2019-7257Kavram kanıtı | Linear eMerge E3-Series devices allow Unrestricted File Upload.nortekcontrol · linear emerge essential firmware · CWE-434 | Kritik10,0 | — | %70,0 | 2 Tem 2019 |
58Planlayın | CVE-2022-31499Kavram kanıtı | Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo.nortekcontrol · emerge e3 firmware · CWE-78 | Kritik9,8 | — | %64,6 | 25 Ağu 2022 |
55Planlayın | CVE-2019-7254Kavram kanıtı | Linear eMerge E3-Series devices allow File Inclusion.nortekcontrol · linear emerge essential firmware · CWE-22 | Yüksek7,5 | — | %82,3 | 2 Tem 2019 |
55Planlayın | CVE-2024-9441Kavram kanıtı | Linear eMerge e3-Series Forgot Password Command Injectionlinear · emerge e3-series · CWE-78 | Kritik9,8 | — | %53,5 | 2 Eki 2024 |
51Planlayın | CVE-2019-7269Kavram kanıtı | Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.nortekcontrol · linear emerge 50p firmware · CWE-78 | Kritik9,8 | — | %40,0 | 2 Tem 2019 |
46Planlayın | CVE-2019-7265Kavram kanıtı | Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).nortekcontrol · linear emerge essential firmware · CWE-798 | Kritik9,8 | — | %23,1 | 2 Tem 2019 |
45Planlayın | CVE-2019-7267İstismar yok | Linear eMerge 50P/5000P devices allow Cookie Path Traversal.nortekcontrol · linear emerge 50p firmware · CWE-22 | Kritik9,8 | — | %21,5 | 2 Tem 2019 |
42Planlayın | CVE-2019-7268İstismar yok | Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.nortekcontrol · linear emerge 50p firmware · CWE-434 | Kritik10,0 | — | %6,5 | 2 Tem 2019 |
41Planlayın | CVE-2019-7255Kavram kanıtı | Linear eMerge E3-Series devices allow XSS.nortekcontrol · linear emerge essential firmware · CWE-79 | Orta6,1 | — | %55,8 | 2 Tem 2019 |
41Planlayın | CVE-2019-7258İstismar yok | Linear eMerge E3-Series devices allow Privilege Escalation.nortekcontrol · linear emerge essential firmware · CWE-863 | Yüksek8,8 | — | %19,6 | 2 Tem 2019 |
41Planlayın | CVE-2019-7260İstismar yok | Linear eMerge E3-Series devices have Cleartext Credentials in a Database.nortekcontrol · linear emerge essential firmware · CWE-522 | Kritik9,8 | — | %6,6 | 2 Tem 2019 |
41Planlayın | CVE-2019-7261İstismar yok | Linear eMerge E3-Series devices have Hard-coded Credentials.nortekcontrol · linear emerge essential firmware · CWE-798 | Kritik9,8 | — | %5,5 | 2 Tem 2019 |
40Planlayın | CVE-2019-7262Kavram kanıtı | Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).nortekcontrol · linear emerge essential firmware · CWE-352 | Yüksek8,8 | — | %16,3 | 2 Tem 2019 |
40Planlayın | CVE-2019-7252İstismar yok | Linear eMerge E3-Series devices have Default Credentials.nortekcontrol · linear emerge essential firmware · CWE-1188 | Kritik9,8 | — | %4,9 | 2 Tem 2019 |
40Planlayın | CVE-2019-7266İstismar yok | Linear eMerge 50P/5000P devices allow Authentication Bypass.nortekcontrol · linear emerge 50p firmware · CWE-565 | Kritik9,8 | — | %4,6 | 2 Tem 2019 |
40Planlayın | CVE-2018-5439İstismar yok | A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior.nortekcontrol · emerge e3 firmware · CWE-77 | Kritik9,8 | — | %4,2 | 19 Şub 2018 |
40Planlayın | CVE-2019-7271İstismar yok | Nortek Linear eMerge 50P/5000P devices have Default Credentials.nortekcontrol · linear emerge 50p firmware · CWE-522 | Kritik9,8 | — | %3,6 | 1 Tem 2019 |
40Planlayın | CVE-2019-7253İstismar yok | Linear eMerge E3-Series devices allow Directory Traversal.nortekcontrol · linear emerge essential firmware · CWE-22 | Kritik9,8 | — | %3,0 | 2 Tem 2019 |
40Planlayın | CVE-2019-7264İstismar yok | Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.nortekcontrol · linear emerge essential firmware · CWE-787 | Kritik9,8 | — | %2,2 | 2 Tem 2019 |
40Planlayın | CVE-2019-7263İstismar yok | Linear eMerge E3-Series devices have a Version Control Failure.nortekcontrol · linear emerge essential firmware · CWE-18 | Kritik9,8 | — | %1,8 | 2 Tem 2019 |
39İzleyin | CVE-2019-7259İstismar yok | Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.nortekcontrol · linear emerge essential firmware · CWE-200 | Yüksek8,8 | — | %13,2 | 2 Tem 2019 |
35İzleyin | CVE-2019-7270İstismar yok | Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).nortekcontrol · linear emerge 50p firmware · CWE-352 | Yüksek8,8 | — | %1,1 | 2 Tem 2019 |
34İzleyin | CVE-2022-31269Kavram kanıtı | Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doonortekcontrol · emerge e3 firmware · CWE-798 | Yüksek8,2 | — | %7,0 | 25 Ağu 2022 |
27İzleyin | CVE-2022-31798Kavram kanıtı | Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) whenortekcontrol · emerge e3 firmware · CWE-384 | Orta6,1 | — | %8,5 | 25 Ağu 2022 |
- CVE-2019-725698Hemen
Linear eMerge E3-Series devices allow Command Injections.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2019-725761Bu hafta
Linear eMerge E3-Series devices allow Unrestricted File Upload.
KritikCVSS 10,0Kavram kanıtıEPSS %70nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2022-3149958Planlayın
Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo.
KritikCVSS 9,8Kavram kanıtıEPSS %65nortekcontrol · emerge e3 firmware25 Ağu 2022
- CVE-2019-725455Planlayın
Linear eMerge E3-Series devices allow File Inclusion.
YüksekCVSS 7,5Kavram kanıtıEPSS %82nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2024-944155Planlayın
Linear eMerge e3-Series Forgot Password Command Injection
KritikCVSS 9,8Kavram kanıtıEPSS %53linear · emerge e3-series2 Eki 2024
- CVE-2019-726951Planlayın
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.
KritikCVSS 9,8Kavram kanıtıEPSS %40nortekcontrol · linear emerge 50p firmware2 Tem 2019
- CVE-2019-726546Planlayın
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
KritikCVSS 9,8Kavram kanıtıEPSS %23nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2019-726745Planlayın
Linear eMerge 50P/5000P devices allow Cookie Path Traversal.
KritikCVSS 9,8İstismar yokEPSS %21nortekcontrol · linear emerge 50p firmware2 Tem 2019
- CVE-2019-726842Planlayın
Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.
KritikCVSS 10,0İstismar yokEPSS %6nortekcontrol · linear emerge 50p firmware2 Tem 2019
- CVE-2019-725541Planlayın
Linear eMerge E3-Series devices allow XSS.
OrtaCVSS 6,1Kavram kanıtıEPSS %56nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2019-725841Planlayın
Linear eMerge E3-Series devices allow Privilege Escalation.
YüksekCVSS 8,8İstismar yokEPSS %20nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2019-726041Planlayın
Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
KritikCVSS 9,8İstismar yokEPSS %7nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2019-726141Planlayın
Linear eMerge E3-Series devices have Hard-coded Credentials.
KritikCVSS 9,8İstismar yokEPSS %5nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2019-726240Planlayın
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
YüksekCVSS 8,8Kavram kanıtıEPSS %16nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2019-725240Planlayın
Linear eMerge E3-Series devices have Default Credentials.
KritikCVSS 9,8İstismar yokEPSS %5nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2019-726640Planlayın
Linear eMerge 50P/5000P devices allow Authentication Bypass.
KritikCVSS 9,8İstismar yokEPSS %5nortekcontrol · linear emerge 50p firmware2 Tem 2019
- CVE-2018-543940Planlayın
A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior.
KritikCVSS 9,8İstismar yokEPSS %4nortekcontrol · emerge e3 firmware19 Şub 2018
- CVE-2019-727140Planlayın
Nortek Linear eMerge 50P/5000P devices have Default Credentials.
KritikCVSS 9,8İstismar yokEPSS %4nortekcontrol · linear emerge 50p firmware1 Tem 2019
- CVE-2019-725340Planlayın
Linear eMerge E3-Series devices allow Directory Traversal.
KritikCVSS 9,8İstismar yokEPSS %3nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2019-726440Planlayın
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.
KritikCVSS 9,8İstismar yokEPSS %2nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2019-726340Planlayın
Linear eMerge E3-Series devices have a Version Control Failure.
KritikCVSS 9,8İstismar yokEPSS %2nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2019-725939İzleyin
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
YüksekCVSS 8,8İstismar yokEPSS %13nortekcontrol · linear emerge essential firmware2 Tem 2019
- CVE-2019-727035İzleyin
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).
YüksekCVSS 8,8İstismar yokEPSS %1nortekcontrol · linear emerge 50p firmware2 Tem 2019
- CVE-2022-3126934İzleyin
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doo
YüksekCVSS 8,2Kavram kanıtıEPSS %7nortekcontrol · emerge e3 firmware25 Ağu 2022
- CVE-2022-3179827İzleyin
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) whe
OrtaCVSS 6,1Kavram kanıtıEPSS %9nortekcontrol · emerge e3 firmware25 Ağu 2022