CVE-2021-45420

Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and /cgi-bin/lo_utils.cgi. An attacker will be able to write any file on the target system without any kind of authentication mechanism, and this can lead to denial of service and potentially remote code execution. Note: the product has not been supported since 2018 and should be removed or replaced.

• CWE-200
• CWE-306
• CWE-668

• https://www.swascan.com/emersonExploit, Third Party Advisory
• https://www.swascan.com/emersonExploit, Third Party Advisory

Published

Feb 14, 2022

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45411In Sourcecodetester Printable Staff ID Card Creator System 1…9.8
• CVE-2021-45414A Remote Code Execution (RCE) vulnerability exists in DataRo…9.8
• CVE-2021-45416Reflected Cross-site scripting (XSS) vulnerability in Rosari…6.1
• CVE-2021-45417AIDE before 0.17.4 allows local users to obtain root privile…7.8
• CVE-2021-45418Certain Starcharge products are vulnerable to Directory Trav…8.8
• CVE-2021-45419Certain Starcharge products are affected by Improper Input V…8.8
• CVE-2021-45421Emerson Dixell XWEB-500 products are affected by information…7.5
• CVE-2021-45422Reprise License Manager 14.2 is affected by a reflected cros…6.1
• CVE-2021-45423A Buffer Overflow vulnerabilityexists in Pev 0.81 via the pe…9.8
• CVE-2021-45425Reflected Cross Site Scripting (XSS) in SAFARI Montage versi…6.1
• CVE-2021-45427Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthen…9.8
• CVE-2021-45428TLR-2005KSH is affected by an incorrect access control vulne…9.8