PT-2021-17464 · Emerson · Emerson Rosemount X-Stream Gas Analyzer

Published 2021-05-20 · Updated 2021-05-28 · CVE-2021-27459

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer (affected versions not specified)

Description A vulnerability has been found in the Emerson Rosemount X-STREAM Gas Analyzer, where the webserver of the affected products allows unvalidated files to be uploaded. This could be utilized by an attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-27459

Affected Products

Emerson Rosemount X-Stream Gas Analyzer

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-27459 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01 · Note
• https://t.me/cvenotify/14724 · Telegram Post