Description
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the affected products allows unvalidated files to be uploaded, which an attacker could utilize to execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Emerson Rosemount X-STREAM Gas Analyzer | X-STREAM enhanced XEGP – all revisions, X-STREAM enhanced XEGK – all revisions, X-STREAM enhanced XEFD – all revisions, X-STREAM enhanced XEXF – all revisions | — |
Advisories 1
- ICSA-21-138-01 ICSA-21-138-01_Emerson Rosemount X-STREAM CISA ICS & IT advisories · May 18, 2021