CVE-2021-45427

Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal. An attacker can browse and delete files without any authentication due to incorrect access control and directory traversal.

• CWE-22

• https://drive.google.com/file/d/1IN7p9OKRgdszMVC1TKuZQDa4ySCPmQzO/view?usp=sharingThird Party Advisory
• https://drive.google.com/file/d/1RegGlCrtyQwW9DUirAbPDiIHKBWgsBea/view?usp=sharingThird Party Advisory
• https://drive.google.com/file/d/1iusYdheb62dom0DnvAzEiNR-e4EXSf2k/view?usp=sharingExploit, Third Party Advisory
• https://drive.google.com/file/d/1IN7p9OKRgdszMVC1TKuZQDa4ySCPmQzO/view?usp=sharingThird Party Advisory
• https://drive.google.com/file/d/1RegGlCrtyQwW9DUirAbPDiIHKBWgsBea/view?usp=sharingThird Party Advisory
• https://drive.google.com/file/d/1iusYdheb62dom0DnvAzEiNR-e4EXSf2k/view?usp=sharingExploit, Third Party Advisory

Published

Dec 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45419Certain Starcharge products are affected by Improper Input V…8.8
• CVE-2021-45420Emerson Dixell XWEB-500 products are affected by arbitrary f…9.8
• CVE-2021-45421Emerson Dixell XWEB-500 products are affected by information…7.5
• CVE-2021-45422Reprise License Manager 14.2 is affected by a reflected cros…6.1
• CVE-2021-45423A Buffer Overflow vulnerabilityexists in Pev 0.81 via the pe…9.8
• CVE-2021-45425Reflected Cross Site Scripting (XSS) in SAFARI Montage versi…6.1
• CVE-2021-45428TLR-2005KSH is affected by an incorrect access control vulne…9.8
• CVE-2021-45429A Buffer Overflow vulnerablity exists in VirusTotal YARA git…5.5
• CVE-2021-45435An SQL Injection vulnerability exists in Sourcecodester Simp…9.8
• CVE-2021-45440A unnecessary privilege vulnerability in Trend Micro Apex On…7.8
• CVE-2021-45441A origin validation error vulnerability in Trend Micro Apex …7.8
• CVE-2021-45442A link following denial-of-service vulnerability in Trend Mi…7.1