Input validation error in Emerson products - CVE-2021-03554
Published: October 6, 2021
Vulnerability identifier: #VU57092
CSH Severity: Medium
CVSS v4: 8.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-03554
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to insufficient validation of user-supplied input in the restore file. A remote authenticated attacker can pass specially crafted input to the application and execute arbitrary code on the target system.
Affected software
WirelessHART 1410 Gateway
WirelessHART 1410D Gateway
WirelessHART 1420 Gateway
WirelessHART 1410D Gateway
WirelessHART 1420 Gateway
How to mitigate CVE-2021-03554
Install updates from vendor's website.
WirelessHART 1410 Gateway - addressed in versions 4.7.94, 4.7.105
WirelessHART 1410D Gateway - addressed in versions 4.7.94, 4.7.105
WirelessHART 1420 Gateway - addressed in versions 4.7.94, 4.7.105
WirelessHART 1410D Gateway - addressed in versions 4.7.94, 4.7.105
WirelessHART 1420 Gateway - addressed in versions 4.7.94, 4.7.105