← Back

CVE-2021-27463

nvd nist
Published: May 20, 2021Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the session cookie attribute is not properly invalidated, allowing an attacker to intercept the cookies and gain access to sensitive information.

Affected (4)

Emerson
4 products
X Stream Enhanced Xegp Firmware
X Stream Enhanced Xegk Firmware
X Stream Enhanced Xefd Firmware
X Stream Enhanced Xexf Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X Stream Enhanced Xegp Firmware
All versions
Running on/withPlatform Versions
Emerson
X Stream Enhanced Xegp
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X Stream Enhanced Xegk Firmware
All versions
Running on/withPlatform Versions
Emerson
X Stream Enhanced Xegk
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X Stream Enhanced Xefd Firmware
All versions
Running on/withPlatform Versions
Emerson
X Stream Enhanced Xefd
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X Stream Enhanced Xexf Firmware
All versions
Running on/withPlatform Versions
Emerson
X Stream Enhanced Xexf
All versions

Related CWEs

CWE-539
Use of Persistent Cookies Containing Sensitive Information
The web application uses persistent cookies, but the cookies contain sensitive information.

References (2)

Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.