CVE-2021-42539 HIGH

CVE-2021-42539: Emerson WirelessHART Gateway

Vendor Emerson

Product WirelessHART Gateway

Weakness CWE-306 · Missing auth

Published October 22, 2021

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

8.0/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change.

Key dates

02Disclosure timeline

October 22, 2021 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-42539 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/306.html

Related vulnerabilities

Identifiers

CVE CVE-2021-42539

CWE CWE-306

CVSS 8.0 / HIGH

Affected versions

Vendor Emerson

Product WirelessHART Gateway

Affected ≥ 1410 and ≤ 4.7.94

Vendor Emerson

Product WirelessHART Gateway

Affected ≥ 1410D and ≤ 4.7.94

Vendor Emerson

Product WirelessHART Gateway

Affected ≥ 1420 and ≤ 4.7.94

CVE-2021-42539: Emerson WirelessHART Gateway

01Description

02Disclosure timeline

03References

04Related CVE