Emerson Dixell Xweb-500 Firmware vulnerabilities

2 CVEs affecting Emerson Dixell Xweb-500 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-45421, published 2022-02-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-45420, published 2022-02-14. Critical severity, CVSS 9.8. EPSS: 17.6% chance of exploitation in the next 30 days. Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and /cgi-bin/lo_utils.cgi. An attacker will be able to…
CVE-2021-45421, published 2022-02-14. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Emerson Dixell XWEB-500 products are affected by information disclosure via directory listing. A potential attacker can use this misconfiguration to access all the files in the remote directories.…