CVE-2021-27461: Path Traversal

Reference Links

• https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01
• https://www.cisa.gov/news-events/ics-advisories/icsa-21-138-01 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• ICSA-21-138-01

Frequently Asked Questions

• What is the vulnerability ID for this vulnerability?

  The vulnerability ID for this vulnerability is CVE-2021-27461.

• What is the severity of CVE-2021-27461?

  The severity of CVE-2021-27461 is high with a severity value of 7.5.

• Which software versions are affected by CVE-2021-27461?

  CVE-2021-27461 affects multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer such as X-stream Enhanced Xegp Firmware, X-stream Enhanced Xegk Firmware, X-stream Enhanced Xefd Firmware, and X-stream Enhanced Xexf Firmware.

• How can the vulnerability be exploited?

  The vulnerability in the affected webserver applications can be exploited by using specially crafted URLs to access and obtain stored data.

• Is there a fix for CVE-2021-27461?

  Currently, there is no information provided regarding a fix for CVE-2021-27461. It is recommended to follow the guidance provided by the vendor or CERT/CC.