Vulnerabilities

TI-2025-39245 CVE-2025-63212 · GHSA-mcxq-f773-jv28

GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300…

MEDIUM 62

GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers (sid) in the publicly accessible log file located at /log/Flexiva%20LX.log.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00383 Published 2025-11-19 No fix listed CWE-200

TI-2023-18107 CVE-2023-36082 · GHSA-rhr4-j48w-fgf2

An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to…

HIGH 82

An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01026 Published 2023-08-03 No fix listed CWE-522

TI-2023-18106 CVE-2023-36081 · GHSA-wmr5-wq4m-p53w

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W…

MEDIUM 58

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code via a crafted script to the web application dashboard.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00568 Published 2023-08-02 No fix listed CWE-79

Vulnerabilities

Filters

GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300…

An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to…

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W…