Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2019-7271: Nortek Linear eMerge 50P/5000P devices use default passwords

CVE-2019-7271 · published 7 years ago

Summary

The firmware for Nortek Linear eMerge 50P and 5000P controllers ships with a preset username and password. Because the login details are known and unchanged, anyone who can reach the device could log in and change its settings. Change the default credentials to a strong, unique password as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
nortekcontrol	linear_emerge_50p_firmware	<= 4.6.07 `cpe:2.3:o:nortekcontrol:linear_emerge_50p_firmware::::::::`
nortekcontrol	linear_emerge_5000p_firmware	<= 4.6.07 `cpe:2.3:o:nortekcontrol:linear_emerge_5000p_firmware::::::::`

Original advisory text

Nortek Linear eMerge 50P/5000P devices have Default Credentials.

References

https://applied-risk.com/labs/advisories Third Party Advisory
https://www.applied-risk.com/resources/ar-2019-006 Third Party Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Exploitation

4% chance of attack within 30 days

Type

CWE-522Insufficiently Protected Credentials

Timeline

Published1 Jul 2019

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2019-7271 · NVD

Track software like this

Free during beta