CVE-2021-27465: XSS

Published May 20, 2021

Updated

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorrect or undesirable data.

Affected Software

12 affected components

Emerson X-STREAM enhanced XEGP – all revisions

Emerson X-STREAM enhanced XEGK – all revisions

Emerson X-STREAM enhanced XEFD – all revisions

Emerson X-STREAM enhanced XEXF – all revisions

Emerson X-stream Enhanced Xegp Firmware

Emerson X-STREAM enhanced XEGP

Emerson X-stream Enhanced Xegk Firmware

Emerson X-stream Enhanced Xegk

Emerson X-stream Enhanced Xefd Firmware

Emerson X-stream Enhanced Xefd

Emerson X-stream Enhanced Xexf Firmware

Emerson X-stream Enhanced Xexf

Event History

May 20, 2021

CVE Published

via MITRE·11:05 AM

Data Sourced

via MITRE·11:05 AM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-21-138-01

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2021-27465.

What is the severity of CVE-2021-27465?

The severity of CVE-2021-27465 is medium.

Which software versions are affected by CVE-2021-27465?

Multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer are affected by CVE-2021-27465.

How does CVE-2021-27465 impact the affected applications?

CVE-2021-27465 allows an attacker to inject arbitrary HTML code into a webpage, potentially modifying the page and displaying incorrect information.

Is there a fix available for CVE-2021-27465?

Please refer to the official reference provided by the US-CERT for information on available fixes for CVE-2021-27465.