GCVE - cpe:2.3:o:airangel:hsmx-app-25_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:airangel:hsmx-app-25_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Airangel (`32d51071-5185-51bc-9c44-86b372e354cb`)
Product	Hsmx App 25 Firmware (`2377ffe9-c88e-503b-8d4c-c7088c52c73a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-40521`	vulnerable	2026-06-08 05:35:18.640976	Details available Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution. Published: 2021-11-10T15:55:23.000Z Updated: 2024-08-04T02:44:10.841Z Open on db.gcve.eu Reference links https://airangel.com/hsmx-gateway/ http://etizazmohsin.com/hsmx.html#rce	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40520`	vulnerable	2026-06-08 05:35:18.639830	Details available Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials. Published: 2021-11-10T16:06:12.000Z Updated: 2024-08-04T02:44:10.789Z Open on db.gcve.eu Reference links https://airangel.com/hsmx-gateway/ http://etizazmohsin.com/hsmx.html#ssh	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40519`	vulnerable	2026-06-08 05:35:18.638846	Details available Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials. Published: 2021-11-10T15:57:09.000Z Updated: 2024-08-04T02:44:10.848Z Open on db.gcve.eu Reference links https://airangel.com/hsmx-gateway/ http://etizazmohsin.com/hsmx.html#database	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40518`	vulnerable	2026-06-08 05:35:18.638034	Details available Airangel HSMX Gateway devices through 5.2.04 allow CSRF. Published: 2021-11-10T15:52:55.000Z Updated: 2024-08-04T02:44:10.851Z Open on db.gcve.eu Reference links https://airangel.com/hsmx-gateway/ http://etizazmohsin.com/hsmx.html#csrf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40517`	vulnerable	2026-06-08 05:35:18.630477	Details available Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the name column of the updates table using database access. Published: 2021-11-10T16:01:55.000Z Updated: 2024-08-04T02:44:10.802Z Open on db.gcve.eu Reference links https://airangel.com/hsmx-gateway/ http://etizazmohsin.com/hsmx.html#xss	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.