CVE-2018-5439

A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior. A remote attacker may be able to execute arbitrary code on a target machine with elevated privileges.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-02-19

Last modified

2024-08-05

Weaknesses

CWE-77

Affected products

• Emerge E3 Firmware (Nortekcontrol)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-046-01