Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Emerson Dixell XWEB-500 Directory Listings Expose Sensitive Files

CVE-2021-45421 · published 4 years ago
Summary

The Emerson Dixell XWEB-500 product allows unauthorized access to remote directories, potentially exposing sensitive files. This is a serious issue because it can be exploited by attackers. It is recommended to remove or replace this outdated product, as it has not been supported since 2018.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
emerson dixell_xweb-500_firmware All versions
cpe:2.3:o:emerson:dixell_xweb-500_firmware:-:*:*:*:*:*:*:*
Original advisory text
Emerson Dixell XWEB-500 products are affected by information disclosure via directory listing. A potential attacker can use this misconfiguration to access all the files in the remote directories. ...
Emerson Dixell XWEB-500 products are affected by information disclosure via directory listing. A potential attacker can use this misconfiguration to access all the files in the remote directories. Note: the product has not been supported since 2018 and should be removed or replaced.
References
Severity
7.5 High
Exploitation
1% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published14 Feb 2022
Updated31 Oct 2026
First seen5 Jul 2026
Sources
CVE-2021-45421 · NVD
CVE-2021-45421 · MITRE
Track software like this
Free during beta