CVE-2021-27457: Emerson X-Stream Enhanced Xefd Firmware

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access.

Affected products

• Emerson X-Stream Enhanced Xefd Firmware: any version
• Emerson X-Stream Enhanced Xegk Firmware: any version
• Emerson X-Stream Enhanced Xegp Firmware: any version
• Emerson X-Stream Enhanced Xexf Firmware: any version

Published 2021-05-20. Last modified 2026-06-17.