PT-2021-22915
CVE-2021-40518
·
Published
2021-11-10
·
Updated
2021-11-15
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Airangel HSMX Gateway devices through 5.2.04
Description
The issue allows for Cross-Site Request Forgery (CSRF) attacks. CSRF is a type of attack where an attacker tricks a user into performing unintended actions on a web application that the user is authenticated to.
Recommendations
For Airangel HSMX Gateway devices through 5.2.04, update to a version later than 5.2.04 to resolve the issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾