CVE-2021-40517: Airangel Hsmx-App-1000 Firmware

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the name column of the updates table using database access.

Affected products

• Airangel Hsmx-App-1000 Firmware: up to and including 5.2.04
• Airangel Hsmx-App-100 Firmware: up to and including 5.2.04
• Airangel Hsmx-App-20000 Firmware: up to and including 5.2.04
• Airangel Hsmx-App-25 Firmware: up to and including 5.2.04
• Airangel Hsmx-App-5000 Firmware: up to and including 5.2.04

Published 2021-11-10. Last modified 2026-06-17.