Linear.eMerge.card_scan_decoder.php.Command.Injection

Description

This indicates an attack attempt to exploit a Command Injection vulnerability in Linear eMerge E3-series.
The vulnerability is due to insufficient sanitizing of user supplied inputs. A remote attacker may be able to exploit this to execute arbitrary commands within the context of the application, via a crafted HTTP request.

Outbreak Alert

The vulnerability tracked as CVE-2019-7256 affecting an access control system called Linear eMerge E3-Series is affected by an OS command injection flaw that could allow an attacker to cause remote code execution and full access to the system.

View the full Outbreak Alert Report

Affected Products

Linear eMerge Elite Firmware 1.00-06
Linear eMerge Essential Firmware 1.00-06

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch or updates available for this issue.

References