CVE-2021-42540 HIGH

CVE-2021-42540: Emerson WirelessHART Gateway

Vendor Emerson

Product WirelessHART Gateway

Weakness CWE-123

Published October 22, 2021

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

8.0/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality.

Key dates

02Disclosure timeline

October 22, 2021 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-42540 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/123.html

Related vulnerabilities

Identifiers

CVE CVE-2021-42540

CWE CWE-123

CVSS 8.0 / HIGH

Affected versions

Vendor Emerson

Product WirelessHART Gateway

Affected ≥ 1410 and ≤ 4.7.94

Vendor Emerson

Product WirelessHART Gateway

Affected ≥ 1410D and ≤ 4.7.94

Vendor Emerson

Product WirelessHART Gateway

Affected ≥ 1420 and ≤ 4.7.94

CVE-2021-42540: Emerson WirelessHART Gateway

01Description

02Disclosure timeline

03References

04Related CVE