Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Airangel records in CISA KEVNo Airangel vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 49
Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0449 · Published 2021-11-10 · No fix listed
Priority MEDIUM 45
Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01141 · Published 2021-11-10 · No fix listed CWE-798
Priority MEDIUM 44
Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01183 · Published 2021-11-10 · No fix listed CWE-521
Priority LOW 29
Airangel HSMX Gateway devices through 5.2.04 allow CSRF.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00426 · Published 2021-11-10 · No fix listed CWE-352
Priority LOW 25
Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00527 · Published 2021-11-10 · No fix listed CWE-79
Open these records in search →