CVE-2021-40521: Airangel Hsmx-App-1000 Firmware

Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days.

Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution.

Affected products

• Airangel Hsmx-App-1000 Firmware: up to and including 5.2.04
• Airangel Hsmx-App-100 Firmware: up to and including 5.2.04
• Airangel Hsmx-App-20000 Firmware: up to and including 5.2.04
• Airangel Hsmx-App-25 Firmware: up to and including 5.2.04
• Airangel Hsmx-App-5000 Firmware: up to and including 5.2.04

Published 2021-11-10. Last modified 2026-06-17.