medium6.1
CVE-2021-27465
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer.
Impact
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorrect or undesirable data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emerson | X-Stream Enhanced Xegp Firmware | All versions |
| Emerson | X-Stream Enhanced Xegk Firmware | All versions |
| Emerson | X-Stream Enhanced Xefd Firmware | All versions |
| Emerson | X-Stream Enhanced Xexf Firmware | All versions |