41 matches found
Information disclosure
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page provided by the attacker to gain unauthorized access to sensitive information...
Design/Logic Flaw
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access...
Design/Logic Flaw
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorre...
CVE-2021-27461
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs...
CVE-2021-27461
CVE-2021-27461 is a path traversal vulnerability in Emerson Rosemount X-STREAM Gas Analyzer web servers. Affected products include X-STREAM enhanced XEGP, XEGK, XEFD, and XEXF (all revisions). The underlying issue allows an attacker to access stored data by crafting specific URLs, consistent with...
CVE-2021-27459
CVE-2021-27459 describes a vulnerability in Emerson Rosemount X-STREAM Gas Analyzer where the webserver allows unvalidated file uploads, enabling arbitrary code execution. This affects multiple revisions of the X-STREAM webserver components. Evidence from multiple sources (including ICSA-21-138-0...
CVE-2021-27457
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access...
CVE-2021-27457
CVE-2021-27457 affects Emerson Rosemount X-STREAM Gas Analyzer (X-STREAM enhanced XEGP, XEGK, XEFD, XEXF—all revisions). The root cause is inadequate encryption strength used to store sensitive data, which could allow an attacker to obtain credentials. ICSA/CISA report CVSSv3.1 base score 7.5 (hi...
CVE-2021-27467
The CVE-2021-27467 issue affects Emerson Rosemount X-STREAM Gas Analyzer and its web UI, where the web interface’s handling of UI rendering enables an attacker to route a user to a page controlled by the attacker, potentially exposing sensitive information. The root cause is improper restriction ...
CVE-2021-27465
The CVE-2021-27465 issue affects Emerson Rosemount X-STREAM Gas Analyzer software (XEGP/XEGK/XEFD/XEXF revisions). The vulnerability is a Cross-Site Scripting flaw in the web interface caused by unvalidated webpage input (CWE-79), enabling an attacker to modify pages and display incorrect or unde...
CVE-2021-27463
CVE-2021-27463 affects Emerson Rosemount X-STREAM Gas Analyzer. The vulnerability arises from persistent cookies where the session cookie attribute is not properly invalidated, enabling an attacker to intercept cookies and access sensitive information. Affected products include multiple X-STREAM ...
Emerson Rosemount X-STREAM Gas Analyzer 安全漏洞
The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. A security vulnerability...
Emerson Rosemount X-STREAM Gas Analyzer 安全漏洞
The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. A security vulnerability...
Emerson Rosemount X-STREAM Gas Analyzer 代码问题漏洞
The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. The Emerson Rosemount...
ICSA-21-138-01_Emerson Rosemount X-STREAM
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Emerson Equipment: Rosemount X-STREAM Gas Analyzer Vulnerabilities: Inadequate Encryption Strength, Unrestricted Upload of File with Dangerous Type, Path Traversal, Use of Persistent Cookies Containing...
Emerson Rosemount X-STREAM Gas Analyzer 路径遍历漏洞
The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. A path traversal...
CVE-2020-27254
Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products are vulnerable to improper authentication for accessing log and backup data, which could allow an attacker with a specially crafted URL to obtain access to sensitive information...
Authentication flaw
Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products are vulnerable to improper authentication for accessing log and backup data, which could allow an attacker with a specially crafted URL to obtain access to sensitive information...
CVE-2020-27254
The CVE-2020-27254 entry concerns Emerson Rosemount X-STREAM Gas Analyzer software (X-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions). Affected products are vulnerable to improper authentication (CWE-287), allowing an attacker who can craft a URL to access log/backup data and obtain sensi...
X-STREAM enhanced XEGP Authorization Issues Vulnerability
The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. X-STREAM enhanced XEGP Al...