CVE-2021-42536

The CVE-2021-42536 vulnerability affects Emerson WirelessHART Gateway devices. It allows disclosure of peer usernames and passwords by permitting all users to read global variables, impacting confidentiality (CVE-2021-42536). Reported impacts include high confidentiality exposure with network-rem...

CVE-2020-19417

CVE-2020-19417 affects Emerson Smart Wireless Gateway 1420 firmware 4.6.59. The issue lets non-privileged users (e.g., default account ‘maint’) perform administrative tasks by sending specially crafted HTTP requests to the application, enabling horizontal escalation on the device via the network....

CVE-2020-12030

CVE-2020-12030 affects Emerson WirelessHART Gateway family (Wireless 1410, 1420, 1552WU) when VLAN is enabled. A flaw in the VLAN-enabled firewall configuration code disables the internal gateway firewall, exposing all gateway ports. Public disclosures come from CISA/ICS advisories and vendor not...

CVE-2021-42538

CVE-2021-42538 affects Emerson WirelessHART Gateway. The issue is a parameter injection via passphrase, enabling an attacker to supply uncontrolled input. Impact is high for confidentiality, integrity, and availability per linked advisories, with remote networking attack feasible after insufficie...

CVE-2021-42542

CVE-2021-42542 affects Emerson WirelessHART Gateway devices, where a directory traversal flaw stems from mishandling the structure of the supplied backup folder during restore. Public sources (NVD, CVE record, and ICS advisory) assign a CVSSv3 base score of 8.0 (high) and note remote exploitation...

CVE-2021-38485

The CVE-2021-38485 entry corresponds to Emerson WirelessHART Gateway. The issue is improper input validation in the restore file, allowing a malicious configuration file to replace arbitrary files on disk. Connected sources specify affected products and versions (e.g., WirelessHART 1410/1410D/142...

CVE-2021-42540

The CVE-2021-42540 entry relates to Emerson WirelessHART Gateway and describes an unsanitized extract folder vulnerability in system configuration. The underlying issue allows a low-privileged user to overwrite settings and other key functionality due to missing input/permission validation during...

CVE-2021-42539

The CVE-2021-42539 issue affects Emerson WirelessHART Gateway devices (WirelessHART 1410, 1410D, 1420 gateways) with firmware versions prior to 4.7.94. The root cause is missing authentication/permission validation during system backup restore, enabling a low-privileged attacker to perform action...