CVE-2019-7256

CISA description

Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.

Required action

Contact the vendor for guidance on remediating firmware, per their advisory.

Notes & references

• https://linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf, https://www.cisa.gov/news-events/ics-advisories/icsa-24-065-01
• https://nvd.nist.gov/vuln/detail/CVE-2019-7256

Where this lands in 800-53

Vulnerability data triggers these controls during assessment and continuous monitoring.

• RA-5 · Vulnerability Monitoring and Scanning
• SI-2 · Flaw Remediation
• CM-6 · Configuration Settings
• SI-7 · Software, Firmware, and Information Integrity
• CM-8 · System Component Inventory

External lookups

• NVD · CVE-2019-7256
• CVE.org · CVE-2019-7256
• CISA KEV catalog (canonical)