How severe is CVE-2021-40171?

CVE-2021-40171 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.

Is CVE-2021-40171 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (56th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2021-40171?

CVE-2021-40171 affects Securitashome Securitashome Alarm System Firmware. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2021-40171?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2021-40171 published?

CVE-2021-40171 was published on 2021-12-15 and last updated on 2026-06-17.

CVE-2021-40171

CVE-2021-40171 is a medium-severity vulnerability in Securitashome Securitashome Alarm System Firmware with a CVSS 3.x base score of 5.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 3.x base score 5.3)
CVSS v2: 5.0
EPSS exploit prediction: 1% (56th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Securitashome Securitashome Alarm System Firmware
Published: 2021-12-15
Last modified: 2026-06-17

Description

The absence of notifications regarding an ongoing RF jamming attack in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to block legitimate traffic while not alerting the owner of the system.

Frequently asked questions

What is CVE-2021-40171?: The absence of notifications regarding an ongoing RF jamming attack in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to block legitimate traffic while not alerting the owner of the system.
How severe is CVE-2021-40171?: CVE-2021-40171 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.
Is CVE-2021-40171 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (56th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2021-40171?: CVE-2021-40171 affects Securitashome Securitashome Alarm System Firmware. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2021-40171?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2021-40171 published?: CVE-2021-40171 was published on 2021-12-15 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:o:securitashome:securitashome_alarm_system_firmware:hpgw-g_0.0.2.23f_bg_u-itr-f1-bd_bl.a30.20181117:*:*:*:*:*:*:*

More vulnerabilities in Securitashome Securitashome Alarm System Firmware

CVE-2021-40170 — Medium (CVSS 6.8): An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F…

All CVEs affecting Securitashome Securitashome Alarm System Firmware →