TI-2021-17562 CVE-2021-40521 · GHSA-fw83-hp96-3f54
Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution.
Priority MEDIUM 49
Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution.
Airangel
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Airangel records in CISA KEVNo Airangel vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Hsmx-app-1000 Firmware · all components
TI-2021-17560 CVE-2021-40519 · GHSA-gvgq-v22q-ghqq
Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials.
Priority MEDIUM 45
Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials.
TI-2021-17561 CVE-2021-40520 · GHSA-wcg7-h679-fv25
Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.
Priority MEDIUM 44
Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.
TI-2021-17559 CVE-2021-40518 · GHSA-pcr4-q3c8-5x69
Airangel HSMX Gateway devices through 5.2.04 allow CSRF.
Priority LOW 29
Airangel HSMX Gateway devices through 5.2.04 allow CSRF.
TI-2021-17558 CVE-2021-40517 · GHSA-h762-6348-c38v
Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting.
Priority LOW 25
Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting.