Lucene search

[email protected]CVE-2020-27254

HistoryDec 21, 2020 - 6:15 p.m.

CVE-2020-27254

2020-12-2118:15:00

CWE-287

[email protected]

web.nvd.nist.gov

emerson

rosemount

x-stream gas analyzer

xegp

xegk

xefd

xexf

authentication

vulnerability

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

52.4%

JSON

Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products are vulnerable to improper authentication for accessing log and backup data, which could allow an attacker with a specially crafted URL to obtain access to sensitive information.

CPENameOperatorVersion
emerson:x-stream_enhanced_xegp_firmwareemerson x-stream enhanced xegp firmwareeq*
emerson:x-stream_enhanced_xegk_firmwareemerson x-stream enhanced xegk firmwareeq*
emerson:x-stream_enhanced_xefd_firmwareemerson x-stream enhanced xefd firmwareeq*
emerson:x-stream_enhanced_xexf_firmwareemerson x-stream enhanced xexf firmwareeq*

CPE	Name	Operator	Version
emerson:x-stream_enhanced_xegp_firmware	emerson x-stream enhanced xegp firmware	eq	*
emerson:x-stream_enhanced_xegk_firmware	emerson x-stream enhanced xegk firmware	eq	*
emerson:x-stream_enhanced_xefd_firmware	emerson x-stream enhanced xefd firmware	eq	*
emerson:x-stream_enhanced_xexf_firmware	emerson x-stream enhanced xexf firmware	eq	*

References

us-cert.cisa.gov/ics/advisories/icsa-20-352-01

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

52.4%

JSON

Related for CVE-2020-27254

ics1 prion1 cvelist1