Gatesair

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Gatesair records in CISA KEV

No Gatesair vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Flexiva Fax 150w Firmware 2 records HIGH Flexiva Lx1000 Firmware 1 record MEDIUM Flexiva Lx100 Firmware 1 record MEDIUM Flexiva Lx300 Firmware 1 record MEDIUM Flexiva Lx600 Firmware 1 record MEDIUM

Records

3 records

TI-2023-18107 CVE-2023-36082 · GHSA-rhr4-j48w-fgf2

An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to…

HIGH 82

An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01026 Published 2023-08-03 No fix listed CWE-522

TI-2025-39245 CVE-2025-63212 · GHSA-mcxq-f773-jv28

GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300…

MEDIUM 62

GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers (sid) in the publicly accessible log file located at /log/Flexiva%20LX.log.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00383 Published 2025-11-19 No fix listed CWE-200

TI-2023-18106 CVE-2023-36081 · GHSA-wmr5-wq4m-p53w

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W…

MEDIUM 58

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code via a crafted script to the web application dashboard.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00568 Published 2023-08-02 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0