CVE-2021-27463

State: Published
Severity: Not scored
Published: May 20, 2021
Updated: Aug 3, 2024
Reserved: Feb 19, 2021

Description

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the session cookie attribute is not properly invalidated, allowing an attacker to intercept the cookies and gain access to sensitive information.

Scores

The record has no CVSS score.

Weaknesses

CWE-539 USE OF PERSISTENT COOKIES CONTAINING SENSITIVE INFORMATION CWE-539

Affected Products

Product	Versions
Emerson Rosemount X-STREAM Gas Analyzern/a	X-STREAM enhanced XEGP – all revisions, X-STREAM enhanced XEGK – all revisions, X-STREAM enhanced XEFD – all revisions, X-STREAM enhanced XEXF – all revisionsAffected

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.