Description
There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled. If a user enables the VLAN setting, the internal gateway firewall becomes disabled resulting in exposure of all ports used by the gateway.
Metrics
CVSS 3.1 10.0/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Emerson | Wireless 1410 Gateway | >= 4.6.43, <= 4.7.84 |
| Emerson | Wireless 1420 Gateway | >= 4.6.43, <= 4.7.84 |
| Emerson | Wireless 1552WU Gateway | >= 4.6.43, <= 4.7.84 |
References
- https://us-cert.cisa.gov/ics/advisories/icsa-20-135-02Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-20-135-02Third Party Advisory, US Government Resource
Timeline
- Published
- Sep 29, 2021
- Last modified
- Jun 17, 2026
- NVD status
- Modified