Vulnerabilities

TI-2021-17561 CVE-2021-40520 · GHSA-wcg7-h679-fv25

Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.

MEDIUM 44

Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01183 Published 2021-11-10 No fix listed CWE-521

TI-2021-17558 CVE-2021-40517 · GHSA-h762-6348-c38v

LOW 25

Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00527 Published 2021-11-10 No fix listed CWE-79

TI-2021-17560 CVE-2021-40519 · GHSA-gvgq-v22q-ghqq

MEDIUM 45

Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01141 Published 2021-11-10 No fix listed CWE-798

TI-2021-17562 CVE-2021-40521 · GHSA-fw83-hp96-3f54

MEDIUM 49

Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0449 Published 2021-11-10 No fix listed

TI-2021-17559 CVE-2021-40518 · GHSA-pcr4-q3c8-5x69

LOW 29

Airangel HSMX Gateway devices through 5.2.04 allow CSRF.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00426 Published 2021-11-10 No fix listed CWE-352