Cross site request forgery (csrf)

2021-11-1016:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.9%

JSON

Airangel HSMX Gateway devices through 5.2.04 allow CSRF.

CPENameOperatorVersion
hsmx-app-1000_firmwarele5.2.04
hsmx-app-100_firmwarele5.2.04
hsmx-app-20000_firmwarele5.2.04
hsmx-app-25_firmwarele5.2.04
hsmx-app-5000_firmwarele5.2.04

Name	Operator	Version
hsmx-app-1000_firmware	le	5.2.04
hsmx-app-100_firmware	le	5.2.04
hsmx-app-20000_firmware	le	5.2.04
hsmx-app-25_firmware	le	5.2.04
hsmx-app-5000_firmware	le	5.2.04

References

etizazmohsin.com/hsmx.html

airangel.com/hsmx-gateway/