Nortek

Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).

The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the login_id parameter when invoking the forgot_password functionality over HTTP.

Linear eMerge E3-Series devices have Hard-coded Credentials.

Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).

Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. (This occurs in situations where the CVE-2019-7271 default credentials have been changed.)