CVE-2021-40517

Name of the Vulnerable Software and Affected Versions Airangel HSMX Gateway devices through 5.2.04

Description The issue concerns stored Cross Site Scripting (XSS) where an XSS Payload is placed in the name column of the updates table using database access.

Recommendations For Airangel HSMX Gateway devices through 5.2.04, consider restricting database access to prevent the placement of malicious XSS Payloads in the name column of the updates table until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.