Intrusion PreventionLinear.eMerge.card_scan_decoder.php.Command.Injection
Description
This indicates an attack attempt to exploit a Command Injection vulnerability in Linear eMerge E3-series.
The vulnerability is due to insufficient sanitizing of user supplied inputs. A remote attacker may be able to exploit this to execute arbitrary commands within the context of the application, via a crafted HTTP request.
Outbreak Alert
The vulnerability tracked as CVE-2019-7256 affecting an access control system called Linear eMerge E3-Series is affected by an OS command injection flaw that could allow an attacker to cause remote code execution and full access to the system.
Affected Products
Linear eMerge Elite Firmware 1.00-06
Linear eMerge Essential Firmware 1.00-06
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Currently we are unaware of any vendor supplied patch or updates available for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-04-06 | 15.811 | Sig Added |
| 2020-01-28 | 15.766 | Default_action:pass:drop |
| 2020-01-22 | 15.763 |
References
https://www.exploit-db.com/exploits/47649| ID | 48666 |
| Created | Jan 22, 2020 |
| Updated | Apr 01, 2024 |
| Outbreak Alert | Nice Linear eMerge Attack |
| Threat Signal | View Report |
| Risk |
|
| CVE ID | CVE-2019-7256 |
| Known Exploited | Yes |
| Exploit Prediction Score | 97.47% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Other |