Description
Linear eMerge E3 系列设备存在命令注入漏洞。此漏洞是由于对参数值校验不足导致的。
Linear eMerge E3-Series CVE-2019-7256 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2019-7256
https://www.exploit-db.com/exploits/47619
https://community.fortinet.com/blogs-103/unpacking-the-cve-2019-7256-command-injection-vulnerability-in-linear-emerge-e3-series-194806
https://medium.com/@scottbolen/a-backdoor-in-the-building-unveiling-the-nice-linear-emerge-e3-series-os-command-injection-fdb7d4016ef3
https://www.fortiguard.com/outbreak-alert/nice-linear-emerge-attack
https://github.com/KeepHowling/all_freaking_nuclei_templates/blob/main/CVE-2019-7256.yaml
https://www.tenable.com/cve/CVE-2019-7256
https://www.rapid7.com/db/modules/exploit/linux/http/linear_emerge_unauth_rce_cve_2019_7256/
https://thehackernews.com/2024/10/experts-warn-of-critical-unpatched.html
https://jvn.jp/vu/JVNVU96911165/index.html
https://sploitus.com/exploit?id=MSF:EXPLOIT-LINUX-HTTP-LINEAR_EMERGE_UNAUTH_RCE_CVE_2019_7256-
https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d8f5f4b5-9ef6-45b9-a2cf-4238019d0526
https://www.precogs.ai/vulnerability/cve-2019-7256-nice-linear-emerge-e3-series
https://ggonmerr.tistory.com/145
https://stinner-it.com/nice-linear-emerge-command-injection-vulnerability-cve-2019-7256-70/
https://www.isssource.com/nice-linear-emerge-e3-series/
https://cipherssecurity.com/cve/CVE-2019-7256/
https://threatprotect.qualys.com/2020/02/09/linear-emerge-e3-multiple-security-vulnerabilities/
https://censys.com/advisory/november-5-advisory-linear-emerge-os-command-injection-cve-2024-9441/