CVE-2021-45427: Emerson XWEB300D Evo Firmware

Critical severity, CVSS 9.8. EPSS: 19.2% chance of exploitation in the next 30 days.

Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal. An attacker can browse and delete files without any authentication due to incorrect access control and directory traversal.

Affected products

• Emerson XWEB300D Evo Firmware: version 3.0.7 only

Published 2021-12-30. Last modified 2026-06-17.