QSearchQSearch

CVE-2021-42539

8.0 HIGH

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and...

Published: 2021-10-22 · Last updated: 2026-06-17

Severity and scoring

CVSS
8.0 HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE
CWE-306

Affected products

VendorProduct
emersonwireless_1410_gateway_firmware, wireless_1410d_gateway_firmware, wireless_1420_gateway_firmware

Description

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2021-42542 — The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure (8.0 HIGH)
  • CVE-2021-42540 — The affected product is vulnerable to a unsanitized extract folder for system configuration (8.0 HIGH)
  • CVE-2021-42538 — The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input (8.0 HIGH)
  • CVE-2021-42536 — The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables (8.0 HIGH)
  • CVE-2021-38485 — The affected product is vulnerable to improper input validation in the restore file (8.0 HIGH)

Same CWE

  • CVE-2026-0647 — An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server
  • CVE-2018-25437 — WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download... (7.5 HIGH)
  • CVE-2026-12183 — Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerabili... (9.8 CRITICAL)
  • CVE-2026-53868 — Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses ... (7.5 HIGH)
  • CVE-2026-50287 — AgenticMail gives AI agents real email addresses and phone numbers