CVE-2019-7256VulnerabilityPublished 03/25/2024Updated 10/24/2026
CVE-2019-7256: Nice Linear eMerge E3-Series OS Command Injection Vulnerability
Affects Nice Linear eMerge E3-SeriesSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 03/25/2024
- KEV deadline
- 04/15/2024
- EPSS
- 97.1% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Contact the vendor for guidance on remediating firmware, per their advisory.
Description
Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.
Weaknesses
References
- linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf, (opens in a new tab)
- cisa.gov/news-events/ics-advisories/icsa-24-065-01 (opens in a new tab)
- nvd.nist.gov/vuln/detail/CVE-2019-7256 (opens in a new tab)
- cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2019-7256 (opens in a new tab)