Vulnerability Description
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorrect or undesirable data.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Emerson | X-Stream Enhanced Xegp Firmware | All versions |
| Emerson | X-Stream Enhanced Xegp | - |
| Emerson | X-Stream Enhanced Xegk Firmware | All versions |
| Emerson | X-Stream Enhanced Xegk | - |
| Emerson | X-Stream Enhanced Xefd Firmware | All versions |
| Emerson | X-Stream Enhanced Xefd | - |
| Emerson | X-Stream Enhanced Xexf Firmware | All versions |
| Emerson | X-Stream Enhanced Xexf | - |
Related Weaknesses (CWE)
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01Third Party AdvisoryUS Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2021-27465?
CVE-2021-27465 is a vulnerability with a CVSS score of 6.1 (MEDIUM). A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitr...
How severe is CVE-2021-27465?
CVE-2021-27465 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-27465?
Check the references section above for vendor advisories and patch information. Affected products include: Emerson X-Stream Enhanced Xegp Firmware, Emerson X-Stream Enhanced Xegp, Emerson X-Stream Enhanced Xegk Firmware, Emerson X-Stream Enhanced Xegk, Emerson X-Stream Enhanced Xefd Firmware.