CVE-2019-7262

Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2019-07-02

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• Linear Emerge Elite Firmware (Nortekcontrol)
• Linear Emerge Essential Firmware (Nortekcontrol)

References

• http://packetstormsecurity.com/files/155263/Nortek-Linear-eMerge-E3-Access-Control-Cross-Site-Request-Forgery.html
• https://applied-risk.com/labs/advisories
• https://www.applied-risk.com/resources/ar-2019-005