CVE-2021-40171

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The absence of notifications regarding an ongoing RF jamming attack in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to block legitimate traffic while not alerting the owner of the system.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.diva-portal.org/smash/get/diva2:1600180/FULLTEXT04.pdfThird Party Advisory
https://www.securitashome.se/product.html/securitashomeVendor Advisory
https://www.diva-portal.org/smash/get/diva2:1600180/FULLTEXT04.pdfThird Party Advisory
https://www.securitashome.se/product.html/securitashomeVendor Advisory

Timeline

Published: Dec 15, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-401728.8Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings.CVE-2021-401738.8Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings.CVE-2021-401748.8Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings.CVE-2021-401759.8Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution.CVE-2021-401766.1Zoho ManageEngine Log360 before Build 5225 allows stored XSS.CVE-2021-401779.8Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.CVE-2021-401786.1Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings.CVE-2021-40185.4snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2021-401807.5In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.sear CVE-2021-401867.5The AppCheck research team identified a Server-Side Request Forgery (SSRF) vulnerability within the DNN CMS platform, formerly known as DotN CVE-2021-401887.2PHPFusion 9.03.110 is affected by an arbitrary file upload vulnerability. The File Manager function in admin panel does not filter all PHP e CVE-2021-401897.2PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme Fo