CVE-2021-40520: Airangel Hsmx-App-1000 Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.

Affected products

• Airangel Hsmx-App-1000 Firmware: up to and including 5.2.04
• Airangel Hsmx-App-100 Firmware: up to and including 5.2.04
• Airangel Hsmx-App-20000 Firmware: up to and including 5.2.04
• Airangel Hsmx-App-25 Firmware: up to and including 5.2.04
• Airangel Hsmx-App-5000 Firmware: up to and including 5.2.04

Published 2021-11-10. Last modified 2026-06-17.