ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-42540

—
CVSS 3.1
8.8 high
EPSS
1%p62
Published
()
Modified
Description

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality.

Vendors
emerson
Products
wireless 1410 gateway firmware, wireless 1410d gateway firmware, wireless 1420 gateway firmware
Weakness
CWE-123
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news

No ingested article mentions this CVE yet.