Gatesair

gatesair

3 CVEs • 10 products

Products (10)

Click to collapse

Toggle

Flexiva Fax 150w Firmware

flexiva_fax_150w_firmware

Flexiva Lx100 Firmware

flexiva_lx100_firmware

Flexiva Lx300 Firmware

flexiva_lx300_firmware

Flexiva Lx600 Firmware

flexiva_lx600_firmware

Flexiva Lx1000 Firmware

flexiva_lx1000_firmware

Flexiva Fax 150w

flexiva_fax_150w

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-63212 1Gatesair 4Flexiva Lx1000 Firmware Flexiva Lx100 FirmwareFlexiva Lx300 Firmware+1 more Jun 17, 2026 Nov 19, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers (sid) in the publicly accessible log file located at /log/Flexiva%20LX.log. A...Show more GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers (sid) in the publicly accessible log file located at /log/Flexiva%20LX.log. An unauthenticated attacker can retrieve valid session IDs and hijack sessions without providing any credentials. This attack requires the legitimate user (admin) to have previously closed the browser window without logging out.Show less
CVE-2023-36082 1Gatesair 1Flexiva Fax 150w Firmware Jul 9, 2026 Aug 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials.
CVE-2023-36081 1Gatesair 1Flexiva Fax 150w Firmware Jul 9, 2026 Aug 2, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code via a crafted script to the web application dashboard.