Emerson Wireless 1410 Gateway vulnerabilities
7 vulnerabilities
Known vulnerabilities in Emerson Wireless 1410 Gateway, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-42536emersonwireless_1410_gateway_firmware+3
EPSS score0.94%
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables.CVE-2021-42542emersonwireless_1410_gateway_firmware+3EPSS score1.48%
The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure.CVE-2021-42538emersonwireless_1410_gateway_firmware+3EPSS score0.98%
The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input.CVE-2021-42539emersonwireless_1410_gateway_firmware+3EPSS score0.79%
The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change.CVE-2021-42540emersonwireless_1410_gateway_firmware+3EPSS score1.03%
The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality.CVE-2021-38485emersonwireless_1410_gateway_firmware+3EPSS score0.93%
The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any file on disk.CVE-2020-12030emersonwireless_1410_gateway_firmware+2EPSS score1.13%
There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled. If a user enables the VLAN setting, the internal gateway firewall becomes disabled resulting in exposure of all ports used by the gateway.