CVE-2021-27465: Emerson X-Stream Enhanced Xefd Firmware

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorrect or undesirable data.

Affected products

• Emerson X-Stream Enhanced Xefd Firmware: any version
• Emerson X-Stream Enhanced Xegk Firmware: any version
• Emerson X-Stream Enhanced Xegp Firmware: any version
• Emerson X-Stream Enhanced Xexf Firmware: any version

Published 2021-05-20. Last modified 2026-06-17.