Emerson

Records93All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical21CVSS 9.0–10.0

CVSS high42CVSS 7.0–8.9

Exploited now

Emerson records in CISA KEV

No Emerson vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Deltav 15 records MEDIUM Wireless 1420 Gateway Firmware 8 records MEDIUM Wireless 1410 Gateway Firmware 7 records MEDIUM X-stream Enhanced Xefd Firmware 7 records MEDIUM X-stream Enhanced Xegk Firmware 7 records MEDIUM X-stream Enhanced Xegp Firmware 7 records MEDIUM X-stream Enhanced Xexf Firmware 7 records MEDIUM Deltav Workstation 6 records MEDIUM

Records

8 records in Wireless 1420 Gateway Firmware · all components

TI-2020-09689 CVE-2020-12030 · GHSA-9pm2-889q-rpr2

Emerson WirelessHART Gateway

MEDIUM 45

There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01131 Published 2021-09-29 No fix listed CWE-284

TI-2020-13610 CVE-2020-19417 · GHSA-gf9x-r3cv-62c9

Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the…

MEDIUM 43

Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform administrative tasks by sending specially crafted HTTP requests to the application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02746 Published 2021-03-10 No fix listed

TI-2021-18827 CVE-2021-42542 · GHSA-rmf5-vmvg-379x

Path traversal in Emerson WirelessHART Gateway

MEDIUM 41

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2021-10-22 No fix listed CWE-22

TI-2021-18826 CVE-2021-42540 · GHSA-2gp7-jhh8-9gqw

The affected product is vulnerable to a unsanitized extract folder for system…

MEDIUM 40

The affected product is vulnerable to a unsanitized extract folder for system configuration.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01028 Published 2021-10-22 No fix listed CWE-123

TI-2021-18824 CVE-2021-42538 · GHSA-qj5v-xpm2-83w9

OS command injection in Emerson WirelessHART Gateway

MEDIUM 40

The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00976 Published 2021-10-22 No fix listed CWE-78

TI-2021-16085 CVE-2021-38485 · GHSA-3vv9-j796-m9mf

Improper input validation in Emerson WirelessHART Gateway

MEDIUM 40

The affected product is vulnerable to improper input validation in the restore file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00926 Published 2021-10-22 No fix listed CWE-20

TI-2021-18825 CVE-2021-42539 · GHSA-m82f-xpch-cx55

Missing authentication in Emerson WirelessHART Gateway

LOW 39

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00787 Published 2021-10-22 No fix listed CWE-306

TI-2021-18822 CVE-2021-42536 · GHSA-5r3g-xh79-r442

Information disclosure in Emerson WirelessHART Gateway

LOW 37

The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0094 Published 2021-10-22 No fix listed CWE-200

Open these records in search →