CVE-2021-42538

🗓️ 22 Oct 2021 13:23:02Reported by icscertType

The product is vulnerable to parameter injection via passphrase, enabling uncontrolled input

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2021-42538	22 Oct 202118:39	–	circl
CNNVD	Emerson WirelessHART Gateway 命令注入漏洞	22 Oct 202100:00	–	cnnvd
Cvelist	CVE-2021-42538 Emerson WirelessHART Gateway	22 Oct 202113:23	–	cvelist
EUVD	EUVD-2021-29507	3 Oct 202520:07	–	euvd
ICS	Emerson WirelessHART Gateway	5 Oct 202100:00	–	ics
NVD	CVE-2021-42538	22 Oct 202114:15	–	nvd
Prion	Input validation	22 Oct 202114:15	–	prion

NVD

Vulners

Node

emerson wireless_1410_gateway_firmwareRange<4.7.94

AND

emerson wireless_1410_gateway

Node

emerson wireless_1410d_gateway_firmwareRange<4.7.94

AND

emerson wireless_1410d_gateway

Node

emerson wireless_1420_gateway_firmwareRange<4.7.94

AND

emerson wireless_1420_gatewayMatch-

[
  {
    "product": "WirelessHART Gateway",
    "vendor": "Emerson",
    "versions": [
      {
        "lessThanOrEqual": "4.7.94",
        "status": "affected",
        "version": "1410",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.7.94",
        "status": "affected",
        "version": "1410D",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.7.94",
        "status": "affected",
        "version": "1420",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-21-278-02

21 Nov 2024 06:27Current

8.4High risk

Vulners AI Score8.4

CVSS 26.5

CVSS 3.18 - 8.8

EPSS0.00219