gatesair vulnerabilities

Products

• flexiva fax 150w 2
• flexiva fax 150w firmware 2
• flexiva lx100 firmware 1
• flexiva lx1000 firmware 1
• flexiva lx300 firmware 1
• flexiva lx600 firmware 1

Latest gatesair CVEs

Newest publication first

1. CVE-2025-63212 GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers (sid) in the publicly accessible log file located at /log...

   Published 2025-11-19

   Medium·CVSS 6.5 EPSS 0.38%

   GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers (sid) in the publicly accessible log file located at /log/Flexiva%20LX.log. An unauthenticated attacker can retrieve valid session IDs an...

2. CVE-2023-36082 An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials.

   Published 2023-08-03

   Critical·CVSS 9.8 EPSS 1.0%

   An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials.

3. CVE-2023-36081 Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code via a crafted script to the web application dashboard.

   Published 2023-08-02

   Medium·CVSS 5.4 EPSS 0.57%

   Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code via a crafted script to the web application dashboard.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.