Lucene search

K
cve[email protected]CVE-2021-27461
HistoryMay 20, 2021 - 12:15 p.m.

CVE-2021-27461

2021-05-2012:15:08
CWE-22
web.nvd.nist.gov
20
cve-2021-27461
emerson
rosemount
x-stream gas analyzer
vulnerability
data access
webserver
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

61.8%

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs.

Affected configurations

NVD
Node
emersonx-stream_enhanced_xegp_firmware
AND
emersonx-stream_enhanced_xegpMatch-
Node
emersonx-stream_enhanced_xegk_firmware
AND
emersonx-stream_enhanced_xegkMatch-
Node
emersonx-stream_enhanced_xefd_firmware
AND
emersonx-stream_enhanced_xefdMatch-
Node
emersonx-stream_enhanced_xexf_firmware
AND
emersonx-stream_enhanced_xexfMatch-

CNA Affected

[
  {
    "product": "Emerson Rosemount X-STREAM Gas Analyzer",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "X-STREAM enhanced XEGP – all revisions, X-STREAM enhanced XEGK – all revisions, X-STREAM enhanced XEFD – all revisions, X-"
      }
    ]
  }
]

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

61.8%

Related for CVE-2021-27461