ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-27463

—
CVSS 3.1
5.3 medium
EPSS
<1%p58
Published
()
Modified
Description

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the session cookie attribute is not properly invalidated, allowing an attacker to intercept the cookies and gain access to sensitive information.

Vendors
emerson
Products
x-stream enhanced xegp firmware, x-stream enhanced xegk firmware, x-stream enhanced xefd firmware, x-stream enhanced xexf firmware
Weakness
CWE-539
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news

No ingested article mentions this CVE yet.