CVE-2021-27467

State: Published
Severity: Not scored
Published: May 20, 2021
Updated: Aug 3, 2024
Reserved: Feb 19, 2021

Description

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page provided by the attacker to gain unauthorized access to sensitive information.

Scores

The record has no CVSS score.

Weaknesses

CWE-1021 IMPROPER RESTRICTION OF RENDERED UI LAYERS OR FRAMES CWE-1021

Affected Products

Product	Versions
Emerson Rosemount X-STREAM Gas Analyzern/a	X-STREAM enhanced XEGP – all revisions, X-STREAM enhanced XEGK – all revisions, X-STREAM enhanced XEFD – all revisions, X-Affected

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-138-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.