CVE-2021-27467
First published: Thu May 20 2021(Updated: )
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page provided by the attacker to gain unauthorized access to sensitive information.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Emerson X-stream Enhanced Xegp Firmware | ||
| Emerson X-stream Enhanced Xegp | ||
| Emerson X-stream Enhanced Xegk Firmware | ||
| Emerson X-stream Enhanced Xegk | ||
| Emerson X-stream Enhanced Xefd Firmware | ||
| Emerson X-stream Enhanced Xefd | ||
| Emerson X-stream Enhanced Xexf Firmware | ||
| Emerson X-stream Enhanced Xexf | ||
| Emerson X-STREAM enhanced XEGP – all revisions | ||
| Emerson X-STREAM enhanced XEGK – all revisions | ||
| Emerson X-STREAM enhanced XEFD – all revisions | ||
| Emerson X-STREAM enhanced XEXF – all revisions |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-27467.
What is the affected product?
The affected product is Emerson Rosemount X-STREAM Gas Analyzer.
What is the severity level of this vulnerability?
This vulnerability has a severity level of medium (6.1).
How does the vulnerability in the affected product allow unauthorized access to sensitive information?
The vulnerability allows an attacker to route click or keystroke to another page provided by the attacker, leading to unauthorized access to sensitive information.
Is there a fix for this vulnerability?
Please refer to the provided reference link for any available fixes or patches for this vulnerability.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- agent/trending
- vendor/emerson
- canonical/emerson x-stream enhanced xegp firmware
- canonical/emerson x-stream enhanced xegp
- canonical/emerson x-stream enhanced xegk firmware
- canonical/emerson x-stream enhanced xegk
- canonical/emerson x-stream enhanced xefd firmware
- canonical/emerson x-stream enhanced xefd
- canonical/emerson x-stream enhanced xexf firmware
- canonical/emerson x-stream enhanced xexf
- canonical/emerson x-stream enhanced xegp – all revisions
- canonical/emerson x-stream enhanced xegk – all revisions
- canonical/emerson x-stream enhanced xefd – all revisions
- canonical/emerson x-stream enhanced xexf – all revisions