CVE-2019-7256

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Linear eMerge E3-Series devices allow Command Injections.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Jul 2, 2019
Last modified
Jun 17, 2026
Added to CISA KEV
Mar 25, 2024
NVD status
Analyzed

Related CVEs from 2019

CVE-2019-725710.0Linear eMerge E3-Series devices allow Unrestricted File Upload.CVE-2019-72588.8Linear eMerge E3-Series devices allow Privilege Escalation.CVE-2019-72598.8Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.CVE-2019-72609.8Linear eMerge E3-Series devices have Cleartext Credentials in a Database.CVE-2019-72619.8Linear eMerge E3-Series devices have Hard-coded Credentials.CVE-2019-72628.8Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).CVE-2019-72639.8Linear eMerge E3-Series devices have a Version Control Failure.CVE-2019-72649.8Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.CVE-2019-72659.8Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).CVE-2019-72669.8Linear eMerge 50P/5000P devices allow Authentication Bypass.CVE-2019-72679.8Linear eMerge 50P/5000P devices allow Cookie Path Traversal.CVE-2019-726810.0Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.
CVE-2019-7256: Critical severity, CVSS 9.8 | Vulnix