← Database

CVE-2021-40517

MEDIUM CVSS: 5.4 Published: 2021-11-10 Modified: 2026-06-17

Description

Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the name column of the updates table using database access.

Affected Platforms

Airangel Hsmx-App-25 FirmwareAirangel Hsmx-App-100Airangel Hsmx-App-20000 FirmwareAirangel Hsmx-App-1000 FirmwareAirangel Hsmx-App-5000Airangel Hsmx-App-20000Airangel Hsmx-App-100 FirmwareAirangel Hsmx-App-25Airangel Hsmx-App-1000Airangel Hsmx-App-5000 Firmware

Weakness Type

CWE-79

References