CVSS 3.1
5.4 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NCVE-2021-40517
Medium (5.4) in airangel. EPSS 0.5% chance of exploitation in the next 30 days.
Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the name column of the updates table using database access.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- airangel:hsmx-app-1000_firmware
- airangel:hsmx-app-100_firmware
- airangel:hsmx-app-20000_firmware
- airangel:hsmx-app-25_firmware
- airangel:hsmx-app-5000_firmware