Vulnerabilities > Airangel

DATE CVE VULNERABILITY TITLE RISK
2021-11-10 CVE-2021-40517 Cross-site Scripting vulnerability in Airangel products
Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting.
network
low complexity
airangel CWE-79
5.4
5.4
2021-11-10 CVE-2021-40520 Weak Password Requirements vulnerability in Airangel products
Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.
network
low complexity
airangel CWE-521
critical
 9.8
9.8
2021-11-10 CVE-2021-40518 Cross-Site Request Forgery (CSRF) vulnerability in Airangel products
Airangel HSMX Gateway devices through 5.2.04 allow CSRF.
network
low complexity
airangel CWE-352
6.5
6.5
2021-11-10 CVE-2021-40519 Use of Hard-coded Credentials vulnerability in Airangel products
Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials.
network
low complexity
airangel CWE-798
critical
 10.0
10
2021-11-10 CVE-2021-40521 Unspecified vulnerability in Airangel products
Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution.
network
low complexity
airangel
critical
 9.8
9.8