CVE-2019-7255

EUVD-2019-16799 · Published Jul 2, 2019

Linear eMerge E3-Series devices allow XSS.

Technologies

Nortekcontrol Linear Emerge EssentialNortekcontrol Linear Emerge EliteNortekcontrol Linear Emerge Elite FirmwareNortekcontrol Linear Emerge Essential Firmware

Weaknesses

CWE-79

CVSS scores

v3.16.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
v2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

http://packetstormsecurity.com/files/155253/Linear-eMerge-E3-1.00-06-Cross-Site-Scripting.html
https://applied-risk.com/labs/advisories
https://www.applied-risk.com/resources/ar-2019-005

Potentially impacted assets

See if this affects your attack surface