medium5.4
CVE-2021-40517
Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting.
Impact
Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the name column of the updates table using database access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Airangel | Hsmx-App-25 Firmware | through 5.2.04 |
| Airangel | Hsmx-App-100 Firmware | through 5.2.04 |
| Airangel | Hsmx-App-1000 Firmware | through 5.2.04 |
| Airangel | Hsmx-App-5000 Firmware | through 5.2.04 |
| Airangel | Hsmx-App-20000 Firmware | through 5.2.04 |