PT-2021-7808 · Emerson · Emerson Rosemount X-Stream Gas Analyzer

Published 2021-05-18 · Updated 2021-05-28 · CVE-2021-27463

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer (affected versions not specified)

Description A vulnerability has been found in the Emerson Rosemount X-STREAM Gas Analyzer, where the affected applications utilize persistent cookies with the session cookie attribute not properly invalidated. This allows an attacker to intercept the cookies and gain access to sensitive information. The issue is related to the possibility of sending a session cookie file, which can enable a remote attacker to obtain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-539

Related Identifiers

BDU:2023-03014

CVE-2021-27463

Affected Products

Emerson Rosemount X-Stream Gas Analyzer

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-27463 · Security Note
• https://bdu.fstec.ru/vul/2023-03014 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-21-138-01 · Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01 · Note
• https://t.me/cvenotify/14722 · Telegram Post
• https://t.me/cvenotify/15210 · Telegram Post
• https://tenable.com/cve/CVE-2021-27463 · Note