Airangel Hsmx-app-25 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Airangel Hsmx-app-25 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-40519 — CVSS 10.0 (critical): Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials.
• CVE-2021-40520 — CVSS 9.8 (critical): Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.
• CVE-2021-40521 — CVSS 9.8 (critical): Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution.
• CVE-2021-40518 — CVSS 6.5 (medium): Airangel HSMX Gateway devices through 5.2.04 allow CSRF.
• CVE-2021-40517 — CVSS 5.4 (medium): Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the name column of the…