Emerson has 4 CVEs on record between 2022 and 2026. 2 were published in the last 90 days. The median CVSS is 8.7 (high), with 2 rated critical. Most affected products: Ovation (2), dixell_xweb-500_firmware (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.7
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Worst active — by depth score
CVE-2021-45420Critical· 9.8Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and /cgi-bin/lo_utils.cgi69CVE-2022-29966Critical· 9.8Emerson Ovation Missing Authentication for Critical Functionality54CVE-2021-45421High· 7.5Emerson Dixell XWEB-500 products are affected by information disclosure via directory listing42CVE-2022-30267High· 7.5Emerson Ovation Insufficient Verification of Data Authenticity41
Emerson vulnerabilities
CVEs affecting Emerson, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2022-29966Critical· 9.8Emerson Ovation Missing Authentication for Critical Functionality
Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.
CVE-2022-30267High· 7.5Emerson Ovation Insufficient Verification of Data Authenticity
Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve re…
CVE-2021-45421High· 7.5Emerson Dixell XWEB-500 products are affected by information disclosure via directory listing
Emerson Dixell XWEB-500 products are affected by information disclosure via directory listing. A potential attacker can use this misconfiguration to access all the files in the remote directories. Note: the product has not been supported…
CVE-2021-45420Critical· 9.8PoCEmerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and /cgi-bin/lo_utils.cgi
Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and /cgi-bin/lo_utils.cgi. An attacker will be able to write any file on the target system with…