CVE-2021-38485CWE-20

Emerson WirelessHART Gateway

High · published October 22, 2021

CVSS v3.1
8.0
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any file on disk.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00926 · 60.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-10-22T13:23Z
EPSS history
Timeline
  • 22 OCT 13:23Z
    Emerson WirelessHART Gateway
    cvelistv5