CVE-2019-7270

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Jul 2, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-72719.8Nortek Linear eMerge 50P/5000P devices have Default Credentials.CVE-2019-72725.3Optergy Proton/Enterprise devices allow Username Disclosure.CVE-2019-72738.8Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).CVE-2019-72749.8Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.CVE-2019-72756.1Optergy Proton/Enterprise devices allow Open Redirect.CVE-2019-72769.8Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.CVE-2019-72775.3Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.CVE-2019-72786.5Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.CVE-2019-72797.3Optergy Proton/Enterprise devices have Hard-coded Credentials.CVE-2019-72808.8Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which mayCVE-2019-72818.8Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker toCVE-2019-72825.9In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an
CVE-2019-7270: High severity, CVSS 8.8 | Vulnix