$ cve CVE-2021-40521 JSON

CVE-2021-40521

9.8

CRITICAL · CVSS 3.1 · EPSS 4.5% (pctl 91)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution.

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	4.49% — more likely to be exploited than 91% of all CVEs
On CISA KEV	no
Public exploit	none known
Published	2021-11-10
Last modified	2026-06-17