CVE-2021-27467: Medium severity emerson x-stream enhanced xegp vulnerability
Published May 20, 2021
·Updated
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page provided by the attacker to gain unauthorized access to sensitive information.
Affected Software
12 affected components
Emerson X-STREAM enhanced XEGP – all revisions
Emerson X-STREAM enhanced XEGK – all revisions
Emerson X-STREAM enhanced XEFD – all revisions
Emerson X-STREAM enhanced XEXF – all revisions
Emerson X-stream Enhanced Xegp Firmware
Emerson X-STREAM enhanced XEGP
Emerson X-stream Enhanced Xegk Firmware
Emerson X-stream Enhanced Xegk
Emerson X-stream Enhanced Xefd Firmware
Emerson X-stream Enhanced Xefd
Emerson X-stream Enhanced Xexf Firmware
Emerson X-stream Enhanced Xexf
Event History
May 20, 2021
CVE Published
via MITRE·11:05 AM
Data Sourced
via MITRE·11:05 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-27467.
2
What is the affected product?
The affected product is Emerson Rosemount X-STREAM Gas Analyzer.
3
What is the severity level of this vulnerability?
This vulnerability has a severity level of medium (6.1).
4
How does the vulnerability in the affected product allow unauthorized access to sensitive information?
The vulnerability allows an attacker to route click or keystroke to another page provided by the attacker, leading to unauthorized access to sensitive information.
5
Is there a fix for this vulnerability?
Please refer to the provided reference link for any available fixes or patches for this vulnerability.