Infrastructure Briefing — Nortek Linear eMerge access control full-compromise risks
CISA’s ICSA-20-184-01 advisory details path traversal, SQL injection, and dangerous file upload flaws in Linear eMerge 50P/5000P panels that could give remote attackers full system access without urgent upgrades.
Executive briefing: CISA’s ICSA-20-184-01 advisory warns that multiple remotely exploitable flaws in Nortek’s Linear eMerge 50P/5000P access control panels—path traversal, SQL injection, and arbitrary file upload—could let unauthenticated attackers seize the system with full privileges.
Immediate actions for facilities teams
- Patch to v32-09a immediately. Nortek’s update closes the exposed paths; schedule emergency maintenance windows to upgrade all eMerge 50P/5000P nodes.
- Lock down management interfaces. Disable internet exposure, require VPN or jump hosts for console access, and apply ACLs to restrict who can reach the web UI.
- Audit for file uploads and database tampering. Review web server directories and database tables for rogue files or unexpected accounts created via SQL injection.
Strategic follow-through
- Hardening playbook. Add directory traversal and SQL injection tests for the eMerge interface to vulnerability scanning routines.
- Network segmentation. Keep panel-to-controller traffic on isolated VLANs; block outbound internet access except to update repositories.
- Vendor coordination. Track Nortek bulletins and CISA updates for new patches or configuration guidance.
Source excerpts
Primary — exploitation risk: “Successful exploitation of these vulnerabilities could allow a remote attacker to gain full system access.”
CISA ICSA-20-184-01 (Linear eMerge 50P/5000P)
Primary — arbitrary upload exposure: “The vulnerability exists due to the absence of file extension validation when uploading files through the firmware upgrade upload script. A remote, unauthenticated attacker can upload files with arbitrary extensions into a directory within the application’s web root and execute them with privileges of the web server.”
CISA ICSA-20-184-01 (Linear eMerge 50P/5000P)