Skip to main content

Linear Emerge 50P Firmware CVE-2019-7266

CRITICAL
Reliance on Cookies without Validation and Integrity Checking (CWE-565)
2019-07-02 cve@mitre.org
Authentication Bypass Linear Emerge 50P Firmware Linear Emerge 5000P Firmware
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Jul 02, 2019 - 17:15 nvd
CRITICAL 9.8

DescriptionNVD

Linear eMerge 50P/5000P devices allow Authentication Bypass.

AnalysisAI

Linear eMerge 50P/5000P devices allow Authentication Bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-565. Affected products include: Nortekcontrol Linear Emerge 50P Firmware, Nortekcontrol Linear Emerge 5000P Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Linear Emerge 50P Firmware

View all
CVE-2019-7268 CRITICAL POC
10.0 Jul 02

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload. Rated critical severity (CVSS 10.0), this vulnerabili
CVE-2019-7269 CRITICAL POC
9.8 Jul 02

Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution. Rated critical severity

CVE-2019-7267 CRITICAL POC
9.8 Jul 02

Linear eMerge 50P/5000P devices allow Cookie Path Traversal. Rated critical severity (CVSS 9.8), this vulnerability is r
CVE-2019-7271 CRITICAL
9.8 Jul 01

Nortek Linear eMerge 50P/5000P devices have Default Credentials. Rated critical severity (CVSS 9.8), this vulnerability

CVE-2019-7270 HIGH
8.8 Jul 02

Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF). Rated high severity (CVSS 8.8), this vulnerabil

Same weakness CWE-565 – Reliance on Cookies without Validation and Integrity Checking

View all
CVE-2026-0257 HIGH POC
7.8
CVE-2022-50926 CRITICAL POC
9.8
CVE-2025-65212 CRITICAL POC
9.8
CVE-2023-35885 CRITICAL POC
9.8
CVE-2022-38297 CRITICAL POC
9.8
CVE-2017-6896 HIGH POC
8.8
CVE-2024-55211 HIGH POC
8.4
CVE-2018-19224 HIGH POC
7.5

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2019-7266 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy