Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection Vulnerabilities

The Emerson Rosemount GC370XA and others are a gas chromatograph from Emerson Electric Emerson. A command injection vulnerability exists in the Emerson Rosemount GC370XA, GC700XA, and GC1500XA. An attacker could use this vulnerability to run arbitrary commands from a remote computer...

Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection Vulnerabilities

The Emerson Rosemount GC370XA and others are a gas chromatograph from Emerson Electric Emerson. A command injection vulnerability exists in the Emerson Rosemount GC370XA, GC700XA, and GC1500XA. An attacker can use this vulnerability to execute arbitrary commands in the root environment of a remot...

The vulnerability of the web interface of Emerson Rosemount X-STREAM Enhanced microprogrammable instrumentation systems allows a perpetrator to disclose protected information.

The vulnerability of the web interface of Emerson Rosemount X-STREAM Enhanced microprogrammable logic devices is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of microprogrammed software for Rosemount GC370XA, GC700XA, and GC1500XA gas chromatographs lies in the lack of measures taken to neutralize special elements used in the operating system’s command set, allowing attackers to execute arbitrary commands.

The vulnerability of microprogrammed software in Rosemount GC370XA, GC700XA, and GC1500XA gas chromatographs is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrar...

PT-2024-1614 · Emerson · Emerson Rosemount Gc700Xa +2

Name of the Vulnerable Software and Affected Versions: Emerson Rosemount GC370XA, GC700XA, and GC1500XA products affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of Emerson Rosemount GC1500XA, GC700XA, and GC370XA products. An...

The vulnerability of the microprogrammed software of Emerson Rosemount X-STREAM allows a intruder to inject arbitrary HTML code.

The vulnerability of Emerson Rosemount X-STREAM flow analyzers’ microprogramming software is related to improper input cancellation during the generation of web pages. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTML code...

The vulnerability of the microprogrammed software of Emerson Rosemount X-STREAM flow analyzers allows a intruder to disclose protected information.

The vulnerability of Microprogrammed Software in Emerson Rosemount X-STREAM flow analyzers is related to insufficient encryption reliability. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of microprogrammed software in Rosemount GC370XA, GC700XA, and GC1500XA gas chromatographs arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows a perpetrator to execute arbitrary code.

The vulnerability of the microprogrammed software of the Rosemount GC370XA, GC700XA, and GC1500XA gas chromatographs is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

PT-2024-1482 · Emerson · Emerson Rosemount Gc700Xa +2

Name of the Vulnerable Software and Affected Versions: Emerson Rosemount GC370XA, GC700XA, GC1500XA affected versions not specified Description: The issue is related to the lack of measures to neutralize special elements used in the operating system command. This could allow a remote attacker to...

PT-2024-1400 · Emerson · Emerson Rosemount Gc700Xa +2

Name of the Vulnerable Software and Affected Versions: Emerson Rosemount GC370XA, GC700XA, and GC1500XA products affected versions not specified Description: The issue allows an unauthenticated user with network access to execute arbitrary commands in root context from a remote computer. This is...

PT-2024-1735 · Emerson · Emerson Rosemount Gc700Xa +2

Name of the Vulnerable Software and Affected Versions: Emerson Rosemount GC370XA, GC700XA, and GC1500XA products affected versions not specified Description: An unauthenticated user with network access could obtain access to sensitive information or cause a denial-of-service condition due to...

The vulnerability of Emerson Rosemount X-STREAM Enhanced flow analyzers’ microprogramming software lies in the possibility of sending a cookie session file, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Emerson Rosemount X-STREAM Enhanced flow analyzers’ microprogramming software relates to the ability to send a cookie session file. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected information...

The vulnerability of Emerson Rosemount X-STREAM Enhanced flow gas analyzers’ microprogramming software lies in the lack of name-based path restriction, which allows unauthorized access to protected information by attackers.

The vulnerability of Emerson Rosemount X-STREAM Enhanced flow analyzers’ microprogramming software is related to deficiencies in the name-based path restriction mechanism for access to restricted catalogs. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

Emerson Rosemount X-STREAM Gas Analyzer Cross-Site Scripting Vulnerability

The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. A cross-site scripting...

Emerson Rosemount X-STREAM Gas Analyzer Path Traversal Vulnerability

The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. A path traversal...

Emerson Rosemount X-STREAM Gas Analyzer Code Issue Vulnerability

The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. The Emerson Rosemount...

Unspecified Vulnerability in Emerson Rosemount X-STREAM Gas Analyzer (CNVD-2021-37939)

The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. A security vulnerability...

Unspecified Vulnerability in Emerson Rosemount X-STREAM Gas Analyzer

The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. A security vulnerability...

CVE-2021-27457

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access...

CVE-2021-27459

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the affected products allows unvalidated files to be uploaded, which an attacker could utilize to execute arbitrary code...