CVE-2021-27465: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorre...

PT-2021-7989

Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer affected versions not specified Description A vulnerability in the web interface of Emerson Rosemount X-STREAM Gas Analyzer allows an attacker to route clicks or keystrokes to another page provided by th...

CVE-2021-27461: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs...

PT-2021-17464

Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer affected versions not specified Description A vulnerability has been found in the Emerson Rosemount X-STREAM Gas Analyzer, where the webserver of the affected products allows unvalidated files to be...

CVE-2021-27457: Inadequate Encryption Strength

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access...

CVE-2021-27463: Use of Persistent Cookies Containing Sensitive Information

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the session cookie attribute is not properly invalidated, allowing an attacker to intercept the cookies and gain access to sensitive...

Emerson Rosemount X-STREAM Gas Analyzer security vulnerabilities

The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. A security vulnerability...

PT-2021-7987

Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer affected versions not specified Description A vulnerability has been found in the Emerson Rosemount X-STREAM Gas Analyzer, where the affected applications do not validate webpage input. This could allow ...

PT-2021-7986

Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer affected versions not specified Description A vulnerability has been found in Emerson Rosemount X-STREAM Gas Analyzer, where the affected products utilize a weak encryption algorithm for storage of...

Emerson Rosemount X-STREAM Gas Analyzer code-related vulnerabilities

The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. The Emerson Rosemount...

ICSA-21-138-01_Emerson Rosemount X-STREAM

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Emerson Equipment: Rosemount X-STREAM Gas Analyzer Vulnerabilities: Inadequate Encryption Strength, Unrestricted Upload of File with Dangerous Type, Path Traversal, Use of Persistent Cookies Containing...

Emerson Rosemount X-STREAM Gas Analyzer: Path traversal vulnerability

The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. A path traversal...

Emerson Rosemount X-STREAM Gas Analyzer security vulnerabilities

The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. A security vulnerability...

PT-2021-7805

Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer affected versions not specified Description A vulnerability has been found in the Emerson Rosemount X-STREAM Gas Analyzer, allowing access to stored data through specially crafted URLs. The issue is...

PT-2021-7808

Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer affected versions not specified Description A vulnerability has been found in the Emerson Rosemount X-STREAM Gas Analyzer, where the affected applications utilize persistent cookies with the session cook...

CVE-2020-27254

Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products are vulnerable to improper authentication for accessing log and backup data, which could allow an attacker with a specially crafted URL to obtain access to sensitive information...

Authentication flaw

Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products are vulnerable to improper authentication for accessing log and backup data, which could allow an attacker with a specially crafted URL to obtain access to sensitive information...

CVE-2020-27254

The CVE-2020-27254 entry concerns Emerson Rosemount X-STREAM Gas Analyzer software (X-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions). Affected products are vulnerable to improper authentication (CWE-287), allowing an attacker who can craft a URL to access log/backup data and obtain sensi...

CVE-2020-27254: Improper Authentication

Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products are vulnerable to improper authentication for accessing log and backup data, which could allow an attacker with a specially crafted URL to obtain access to sensitive information...

PT-2020-16668

Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer versions all revisions Description The affected products are vulnerable to improper authentication for accessing log and backup data. This could allow an attacker with a specially crafted URL to obtain...