A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior. A remote attacker may be able to execute arbitrary code on a target machine with elevated privileges.

Linear eMerge E3-Series devices have Default Credentials.

Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).

Linear eMerge E3-Series devices allow Directory Traversal.

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.

Linear eMerge E3-Series devices allow Command Injections.

Linear eMerge E3-Series devices have Cleartext Credentials in a Database.

Linear eMerge E3-Series devices have Hard-coded Credentials.

Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.

Nortek Linear eMerge 50P/5000P devices have Default Credentials.

Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.