{"id":"CVE-2019-7256","published":"2019-07-02T19:15:11Z","modified":"2026-06-17T02:40:19Z","title":"Nice Linear eMerge E3-Series OS Command Injection Vulnerability","vendor":"Nice","product":"Linear eMerge E3-Series","tier":"core","eol":null,"description":{"text":"Linear eMerge E3-Series devices allow Command Injections.","provenance":"source","from":"NVD"},"summary":{"text":"The Linear eMerge E3-Series devices from Nice contain an OS command injection flaw, classified as improper neutralization of special elements used in an OS command. An attacker who can reach the device over the network can exploit it without authentication or user interaction, executing arbitrary OS commands with a low-complexity attack.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-30T13:36:08Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.97081,"percentile":0.99892,"date":"2026-10-31","provenance":"source"},"kev":{"dateAdded":"2024-03-25","dueDate":"2024-04-15","ransomware":false,"requiredAction":"Contact the vendor for guidance on remediating firmware, per their advisory.","notes":"https://linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf, https://www.cisa.gov/news-events/ics-advisories/icsa-24-065-01; https://nvd.nist.gov/vuln/detail/CVE-2019-7256","provenance":"source"},"vulncheckKev":{"dateAdded":"2020-02-01","exploitedFirstSeen":"2020-02-01","ransomware":false,"evidence":[{"url":"https://blog.sonicwall.com/en-us/2020/02/linear-emerge-e3-access-controller-actively-being-exploited/","date":"2020-02-01"},{"url":"https://blog.radware.com/security/botnets/2020/05/whos-viktor-tracking-down-the-xtc-polaris-botnets/","date":"2020-05-07"},{"url":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/honeypot-recon-enterprise-applications-honeypot-unveiling-findings-from-six-worldwide-locations/","date":"2023-07-05"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-13&host_type=src&vulnerability=cve-2019-7256","date":"2023-11-13"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-14&host_type=src&vulnerability=cve-2019-7256","date":"2023-11-14"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-15&host_type=src&vulnerability=cve-2019-7256","date":"2023-11-15"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-16&host_type=src&vulnerability=cve-2019-7256","date":"2023-11-16"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-17&host_type=src&vulnerability=cve-2019-7256","date":"2023-11-17"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-20&host_type=src&vulnerability=cve-2019-7256","date":"2023-11-20"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-21&host_type=src&vulnerability=cve-2019-7256","date":"2023-11-21"}],"evidenceTotal":829,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command"}],"references":[{"url":"http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://applied-risk.com/labs/advisories","tags":["Not Applicable"]},{"url":"https://www.applied-risk.com/resources/ar-2019-005","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://applied-risk.com/labs/advisories","tags":["Not Applicable"]},{"url":"https://www.applied-risk.com/resources/ar-2019-005","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7256","tags":["US Government Resource"]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Network-exploitable command injection in public-facing device","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"Linear eMerge E3-Series devices allow Command Injections","start":0,"end":56}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2019-16800","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16800","exploited":true,"exploitedSince":"2024-03-25","provenance":"source"},"exploits":[{"id":47619,"url":"https://www.exploit-db.com/exploits/47619","title":"eMerge E3 1.00-06 - Remote Code Execution","type":"webapps","platform":"hardware","date":"2019-11-12","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2019-11-12"},"metasploit":[{"name":"Linear eMerge E3-Series Access Controller Command Injection","module":"exploit/linux/http/linear_emerge_unauth_rce_cve_2019_7256","type":"exploit","disclosureDate":"2019-10-29","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linear_emerge_unauth_rce_cve_2019_7256.rb"}],"nuclei":[{"id":"CVE-2019-7256","name":"eMerge E3 1.00-06 - Remote Code Execution","severity":"critical","path":"http/cves/2019/CVE-2019-7256.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7256.yaml"}],"first":{"date":"2019-10-29","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linear_emerge_unauth_rce_cve_2019_7256.rb"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html","http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html","http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html","http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html"],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"}],"timeline":[{"date":"2019-07-02","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7256","provenance":"source"},{"date":"2019-10-29","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2019-11-12","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linear_emerge_unauth_rce_cve_2019_7256.rb","provenance":"source"},{"date":"2020-02-01","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://blog.sonicwall.com/en-us/2020/02/linear-emerge-e3-access-controller-actively-being-exploited/","provenance":"source"},{"date":"2024-03-25","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2024-03-25","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16800","provenance":"source"}],"speed":{"daysToPublicExploit":119,"firstExploitFrom":"Metasploit","daysToKev":1728},"priority":{"score":66.8,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 2465 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.98,"detail":"percentile 0.9989"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"4 NVD references tagged Exploit; 1 Exploit-DB entry; 1 Metasploit module; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-nice-linear-emerge-e3-series-cve-2019-7256","children":[{"from":"CVE-2019-7256","to":"CVE-2022-31499","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.","from":"CVE.org","in":"CVE-2022-31499"}]}]}}