CVE-2021-27467 — MEDIUM (6.1)

Vulnerability Description

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page provided by the attacker to gain unauthorized access to sensitive information.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Emerson	X-Stream Enhanced Xegp Firmware	All versions
Emerson	X-Stream Enhanced Xegp	-
Emerson	X-Stream Enhanced Xegk Firmware	All versions
Emerson	X-Stream Enhanced Xegk	-
Emerson	X-Stream Enhanced Xefd Firmware	All versions
Emerson	X-Stream Enhanced Xefd	-
Emerson	X-Stream Enhanced Xexf Firmware	All versions
Emerson	X-Stream Enhanced Xexf	-

Related Weaknesses (CWE)

CWE-1021

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01Third Party AdvisoryUS Government Resource
https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2021-27467?

CVE-2021-27467 is a vulnerability with a CVSS score of 6.1 (MEDIUM). A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page pro...

How severe is CVE-2021-27467?

CVE-2021-27467 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-27467?

Check the references section above for vendor advisories and patch information. Affected products include: Emerson X-Stream Enhanced Xegp Firmware, Emerson X-Stream Enhanced Xegp, Emerson X-Stream Enhanced Xegk Firmware, Emerson X-Stream Enhanced Xegk, Emerson X-Stream Enhanced Xefd Firmware.