Wireless 1410 Gateway Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2021-10-22	CVE-2021-38485	Improper Input Validation vulnerability in Emerson products The affected product is vulnerable to improper input validation in the restore file. network low complexity emerson CWE-20	8.8
2021-10-22	CVE-2021-42536	Exposure of Resource to Wrong Sphere vulnerability in Emerson products The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables. network low complexity emerson CWE-668	6.5
2021-10-22	CVE-2021-42538	Command Injection vulnerability in Emerson products The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input. network low complexity emerson CWE-77	8.8
2021-10-22	CVE-2021-42539	Missing Authentication for Critical Function vulnerability in Emerson products The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change. network low complexity emerson CWE-306	8.8
2021-10-22	CVE-2021-42540	Write-what-where Condition vulnerability in Emerson products The affected product is vulnerable to a unsanitized extract folder for system configuration. network low complexity emerson CWE-123	8.8
2021-10-22	CVE-2021-42542	Path Traversal vulnerability in Emerson products The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure. network low complexity emerson CWE-22	8.8
2021-09-29	CVE-2020-12030	Unspecified vulnerability in Emerson products There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled. network low complexity emerson critical	10.0