Read the docs

Emerson

Records93All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical21CVSS 9.0–10.0
CVSS high42CVSS 7.0–8.9

Exploited now

Emerson records in CISA KEV

No Emerson vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Deltav 15 records MEDIUM Wireless 1420 Gateway Firmware 8 records MEDIUM Wireless 1410 Gateway Firmware 7 records MEDIUM X-stream Enhanced Xefd Firmware 7 records MEDIUM X-stream Enhanced Xegk Firmware 7 records MEDIUM X-stream Enhanced Xegp Firmware 7 records MEDIUM X-stream Enhanced Xexf Firmware 7 records MEDIUM Deltav Workstation 6 records MEDIUM

Records

7 records in Wireless 1410 Gateway Firmware · all components

TI-2020-09689 CVE-2020-12030 · GHSA-9pm2-889q-rpr2

Emerson WirelessHART Gateway

Priority MEDIUM 45

There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01131 Published 2021-09-29 No fix listed CWE-284
TI-2021-18827 CVE-2021-42542 · GHSA-rmf5-vmvg-379x

Path traversal in Emerson WirelessHART Gateway

Priority MEDIUM 41

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2021-10-22 No fix listed CWE-22
TI-2021-18824 CVE-2021-42538 · GHSA-qj5v-xpm2-83w9

OS command injection in Emerson WirelessHART Gateway

Priority MEDIUM 40

The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00976 Published 2021-10-22 No fix listed CWE-78
TI-2021-18825 CVE-2021-42539 · GHSA-m82f-xpch-cx55

Missing authentication in Emerson WirelessHART Gateway

Priority LOW 39

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00787 Published 2021-10-22 No fix listed CWE-306
TI-2021-18822 CVE-2021-42536 · GHSA-5r3g-xh79-r442

Information disclosure in Emerson WirelessHART Gateway

Priority LOW 37

The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0094 Published 2021-10-22 No fix listed CWE-200
Open these records in search →