Description
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorrect or undesirable data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Emerson Rosemount X-STREAM Gas Analyzer | X-STREAM enhanced XEGP – all revisions, X-STREAM enhanced XEGK – all revisions, X-STREAM enhanced XEFD – all revisions, X-STREAM enhanced XEXF – all revisions | — |
Advisories 1
- ICSA-21-138-01 ICSA-21-138-01_Emerson Rosemount X-STREAM CISA ICS & IT advisories · May 18, 2021