Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Nortekcontrol

First CVE: Feb 19, 2018Active for: 8 yearsTotal CVEs: 24
79.3
VTI Score
TOP TARGET

Nortekcontrol's vulnerability profile centers on a focused line of access-control and security systems, particularly its Linear Emerge product family (Elite, Essential, and 5000P variants), which serve as entry points for physical security infrastructure in residential and commercial deployments. Vulnerabilities affecting the vendor skew strongly toward critical severity and frequently acquire public exploit code, reflecting the direct exposure of these devices to internet-facing attack surfaces and the high-value nature of physical-access control. The exposure recurs through a consistent set of structural weaknesses endemic to embedded security appliances: path traversal and OS command injection in management interfaces, hard-coded credentials in firmware, cross-site request forgery in web consoles, and insufficiently protected credential storage. Defenders should prioritize inventory and network isolation of affected Emerge devices, treat firmware updates as urgent, and restrict direct internet exposure of these systems; live exploitation activity and severity counts are shown alongside this summary.

FAUCET AI Generated
24
Total CVEs
More Total CVEs than 97% of tracked vendors
0.8
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 12% of tracked vendors
9.2
Avg CVSS Score
Higher Avg CVSS Score than 88% of tracked vendors
4.2%
In CISA KEV
Higher KEV Rate than 99% of tracked vendors

Trends Over Time

The number and severity of CVEs published that impact products developed by Nortekcontrol over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 19, 2018
8 years ago
Most Recent CVE
Aug 25, 2022
1,429 days ago

Products(10 total)

Top CVEs

Signals from CVEs in this vendor scope (24 CVEs).

24 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2019-7256CRITICAL
Linear eMerge E3-Series devices allow Command Injections.
Jul 2, 20199.899YESYES
CVE-2019-7254HIGH
Linear eMerge E3-Series devices allow File Inclusion.
Jul 2, 20197.584NOYES
CVE-2019-7257CRITICAL
Linear eMerge E3-Series devices allow Unrestricted File Upload.
Jul 2, 201910.079NOYES
CVE-2022-31499CRITICAL
Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix fo
Aug 25, 20229.876NOYES
CVE-2019-7269CRITICAL
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.
Jul 2, 20199.866NOYES
CVE-2019-7255MEDIUM
Linear eMerge E3-Series devices allow XSS.
Jul 2, 20196.163NOYES
CVE-2019-7265CRITICAL
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
Jul 2, 20199.853NOYES
CVE-2019-7267CRITICAL
Linear eMerge 50P/5000P devices allow Cookie Path Traversal.
Jul 2, 20199.842NONO
CVE-2019-7262HIGH
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
Jul 2, 20198.839NOYES
CVE-2022-31269HIGH
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. (This occurs in situations where the
Aug 25, 20228.238NOYES
View all 24 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products24 CVEs
8%
25%
67%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network24 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low24 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None20 (83.3%)
Unknown0 (0.0%)
Required4 (16.7%)
Privileges Required
Low2 (8.3%)
High0 (0.0%)
None22 (91.7%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (24 CVEs).

CISA KEV
1 CVE
4.2% of CVEs· 99th percentile
Metasploit
1 CVE
4.2% of CVEs· 98th percentile
Nuclei
6 CVEs
25.0% of CVEs· 97th percentile
ExploitDB
7 CVEs
29.2% of CVEs· 79th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Nortekcontrol.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Nortekcontrol — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Nortekcontrol's Products

View all 2 CNAs →

Top CWEs