CVE-2021-42540: Emerson Wireless 1410 Gateway Firmware

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality.

Affected products

• Emerson Wireless 1410 Gateway Firmware: before 4.7.94 (fixed in 4.7.94)
• Emerson Wireless 1410d Gateway Firmware: before 4.7.94 (fixed in 4.7.94)
• Emerson Wireless 1420 Gateway Firmware: before 4.7.94 (fixed in 4.7.94)

Published 2021-10-22. Last modified 2026-06-17.