PT-2021-7986 · Emerson · Emerson Rosemount X-Stream Gas Analyzer

Published 2021-05-18 · Updated 2022-07-30 · CVE-2021-27457

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer (affected versions not specified)

Description A vulnerability has been found in Emerson Rosemount X-STREAM Gas Analyzer, where the affected products utilize a weak encryption algorithm for storage of sensitive data. This weakness may allow an attacker to more easily obtain credentials used for access. The issue is related to insufficient reliability of encryption, which could enable a remote attacker to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Inadequate Encryption Strength

Weakness Enumeration

CWE-327

CWE-326

Related Identifiers

BDU:2024-00854

CVE-2021-27457

Affected Products

Emerson Rosemount X-Stream Gas Analyzer

References · 7

• https://bdu.fstec.ru/vul/2024-00854 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-27457 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-21-138-01 · Note
• https://t.me/cvenotify/15343 · Telegram Post
• https://t.me/cvenotify/34045 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01 · Note
• https://t.me/cvenotify/14725 · Telegram Post