SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-45420

Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and /cgi-bin/lo_utils.cgi.

CRITICAL 9.8EPSS 17.5%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 17.5%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and /cgi-bin/lo_utils.cgi. An attacker will be able to write any file on the target system without any kind of authentication mechanism, and this can lead to denial of service and potentially remote code execution. Note: the product has not been supported since 2018 and should be removed or replaced.

CVSS 3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
17.55% probability · 97th percentile
CISA KEV
Not listed
Weakness
CWE-200, CWE-306, CWE-668
Affected
emerson/dixell xweb-500 firmware
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.