NetSight
critical9.8

CVE-2021-27459

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer.

Impact

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the affected products allows unvalidated files to be uploaded, which an attacker could utilize to execute arbitrary code.

Affected products

VendorProductAffected versions
EmersonX-Stream Enhanced Xegp Firmware
All versions
EmersonX-Stream Enhanced Xegk Firmware
All versions
EmersonX-Stream Enhanced Xefd Firmware
All versions
EmersonX-Stream Enhanced Xexf Firmware
All versions

Weakness classification

References