CVE-2021-27459: Emerson X-Stream Enhanced Xefd Firmware

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the affected products allows unvalidated files to be uploaded, which an attacker could utilize to execute arbitrary code.

Affected products

• Emerson X-Stream Enhanced Xefd Firmware: any version
• Emerson X-Stream Enhanced Xegk Firmware: any version
• Emerson X-Stream Enhanced Xegp Firmware: any version
• Emerson X-Stream Enhanced Xexf Firmware: any version

Published 2021-05-20. Last modified 2026-06-17.