CVE-2021-27459

State: Published
Severity: Not scored
Published: May 20, 2021
Updated: Aug 3, 2024
Reserved: Feb 19, 2021

Description

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the affected products allows unvalidated files to be uploaded, which an attacker could utilize to execute arbitrary code.

Scores

The record has no CVSS score.

Weaknesses

CWE-434 UNRESTRICTED UPLOAD OF FILE WITH DANGEROUS TYPE CWE-434

Affected Products

Product	Versions
Emerson Rosemount X-STREAM Gas Analyzern/a	X-STREAM enhanced XEGP – all revisions, X-STREAM enhanced XEGK – all revisions, X-STREAM enhanced XEFD – all revisions, X-STREAM enhanced XEXF – all revisionsAffected

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.