CVE-2021-27463: Medium severity emerson x-stream enhanced xegp vulnerability
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the session cookie attribute is not properly invalidated, allowing an attacker to intercept the cookies and gain access to sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-27463.
What is the severity of CVE-2021-27463?
The severity of CVE-2021-27463 is medium with a severity value of 5.3.
Which software versions are affected by CVE-2021-27463?
Multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer are affected, including X-stream Enhanced Xegp Firmware, X-stream Enhanced Xegk Firmware, X-stream Enhanced Xefd Firmware, and X-stream Enhanced Xexf Firmware.
How does CVE-2021-27463 work?
This vulnerability allows an attacker to intercept the persistent cookies used by the affected applications, thereby gaining access to sensitive information.
Is Emerson X-stream Enhanced Xegp vulnerable to CVE-2021-27463?
Emerson X-stream Enhanced Xegp is vulnerable to CVE-2021-27463.