CVE-2021-27461: Emerson X-Stream Enhanced Xefd Firmware

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs.

Affected products

• Emerson X-Stream Enhanced Xefd Firmware: any version
• Emerson X-Stream Enhanced Xegk Firmware: any version
• Emerson X-Stream Enhanced Xegp Firmware: any version
• Emerson X-Stream Enhanced Xexf Firmware: any version

Published 2021-05-20. Last modified 2026-06-17.