Nortekcontrol vulnerabilities
We track 4 vulnerabilities in Nortekcontrol products across 3 products. 4 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 2, 2024.
Latest Nortekcontrol vulnerabilities
- 9.8 Critical severity
eMerge e3-Series: Improper Neutralization of Special Elements used in an OS Command
The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the login_id parameter when invoking the forgot_password functionality over
- 9.8 Critical severity
Emerge E3 Firmware: Improper Neutralization of Special Elements used in an OS Command
Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.
- 8.2 High severity
Emerge E3 Firmware: Use of Hard-coded Credentials
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. (This occurs in situations where the CVE-2019-7271 default credentials have been changed.)
- 9.8 Critical severity
Nice Linear eMerge E3-Series OS Command Injection Exploited
Linear eMerge E3-Series devices allow Command Injections.