CVE-2021-40517 - OpenCVE

Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the name column of the updates table using database access.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

AV:N/AC:M/Au:S/C:N/I:P/A:N

Vendors & Products
CPE Configurations

Vendors	Products
Airangel	Hsmx-app-20000 Firmware Hsmx-app-20000 Hsmx-app-25 Hsmx-app-100 Hsmx-app-5000 Firmware Hsmx-app-1000 Hsmx-app-1000 Firmware Hsmx-app-100 Firmware Hsmx-app-5000 Hsmx-app-25 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:airangel:hsmx-app-25_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:airangel:hsmx-app-25:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:airangel:hsmx-app-100_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:airangel:hsmx-app-100:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:airangel:hsmx-app-1000_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:airangel:hsmx-app-1000:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:airangel:hsmx-app-5000_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:airangel:hsmx-app-5000:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:airangel:hsmx-app-20000_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:airangel:hsmx-app-20000:-:*:*:*:*:*:*:*

References

Link	Resource
http://etizazmohsin.com/hsmx.html#xss	Exploit Third Party Advisory
https://airangel.com/hsmx-gateway/	Product

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2021-11-10T16:01:55

Updated: 2021-11-10T16:01:55

Reserved: 2021-09-05T00:00:00

Link: CVE-2021-40517

JSON object: View

NVD Information

Status : Analyzed

Published: 2021-11-10T17:15:10.913

Modified: 2021-11-12T22:03:23.707

Link: CVE-2021-40517

JSON object: View

Redhat Information

No data.

CWE

CWE-79

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:airangel:hsmx-app-25_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E95BDF79-C171-4D98-9CCD-5CA0F3A23C31", "versionEndIncluding": "5.2.04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:airangel:hsmx-app-25:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA4D9556-DCDB-45B2-92AC-FD5E18D52FCA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:airangel:hsmx-app-100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "90BA76CF-88CD-47BA-AEFB-F168E4FA5C69", "versionEndIncluding": "5.2.04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:airangel:hsmx-app-100:-:*:*:*:*:*:*:*", "matchCriteriaId": "E13C0E32-7B81-4428-BB5C-8C86A703A9BA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:airangel:hsmx-app-1000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DBEBEE86-0C31-4782-8D78-41B48C647FCF", "versionEndIncluding": "5.2.04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:airangel:hsmx-app-1000:-:*:*:*:*:*:*:*", "matchCriteriaId": "D92343DB-597C-43C4-A967-12AC27C9B0E1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:airangel:hsmx-app-5000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "31678F7E-F1FB-4801-BE44-5B7D7A6BB3A0", "versionEndIncluding": "5.2.04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:airangel:hsmx-app-5000:-:*:*:*:*:*:*:*", "matchCriteriaId": "02BE8018-61F5-4482-8BCE-2F7F64C66FE5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:airangel:hsmx-app-20000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C8731061-B7E3-4010-8346-06951881F33D", "versionEndIncluding": "5.2.04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:airangel:hsmx-app-20000:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF17EAEF-C272-45BB-AFBF-E0D247267D94", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the name column of the updates table using database access."}, {"lang": "es", "value": "Los dispositivos Airangel HSMX Gateway versiones hasta 5.2.04, son vulnerables a un ataque de tipo Cross Site Scripting almacenado. La carga \u00fatil de tipo XSS es colocada en la columna del nombre de la tabla de actualizaciones usando el acceso a la base de datos"}], "id": "CVE-2021-40517", "lastModified": "2021-11-12T22:03:23.707", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-11-10T17:15:10.913", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "http://etizazmohsin.com/hsmx.html#xss"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://airangel.com/hsmx-gateway/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}