High

DATE	CVE	VULNERABILITY TITLE	RISK
2021-10-22	CVE-2021-38485	Unspecified vulnerability in Emerson products The affected product is vulnerable to improper input validation in the restore file. network low complexity emerson	8.8
2021-10-22	CVE-2021-42538	Command Injection vulnerability in Emerson products The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input. network low complexity emerson CWE-77	8.8
2021-10-22	CVE-2021-42539	Unspecified vulnerability in Emerson products The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change. network low complexity emerson	8.8
2021-10-22	CVE-2021-42540	Unspecified vulnerability in Emerson products The affected product is vulnerable to a unsanitized extract folder for system configuration. network low complexity emerson	8.8
2021-10-22	CVE-2021-42542	Unspecified vulnerability in Emerson products The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure. network low complexity emerson	8.8