← Back

CVE-2021-38701

nvd nist
Published: Dec 15, 2021Modified: Nov 21, 2024

JSON object

Loading...
4.8
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Exploitability: 1.7 / Impact: 2.7
Source: NVD

Description

Certain Motorola Solutions Avigilon devices allow XSS in the administrative UI. This affects T200/201 before 4.10.0.68; T290 before 4.4.0.80; T008 before 2.2.0.86; T205 before 4.12.0.62; T204 before 3.28.0.166; and T100, T101, T102, and T103 before 2.6.0.180.

Affected (10)

Motorola
10 products
T008 Firmware
T100 Firmware
T101 Firmware
T102 Firmware
T103 Firmware
T200 Firmware
T201 Firmware
T204 Firmware
T205 Firmware
T290 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
T008 Firmware
Before 2.2.0.86
Running on/withPlatform Versions
Motorola
T008
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
T100 Firmware
Before 2.6.0.180
Running on/withPlatform Versions
Motorola
T100
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
T101 Firmware
Before 2.6.0.180
Running on/withPlatform Versions
Motorola
T101
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
T102 Firmware
Before 2.6.0.180
Running on/withPlatform Versions
Motorola
T102
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
T103 Firmware
Before 2.6.0.180
Running on/withPlatform Versions
Motorola
T103
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
T200 Firmware
Before 4.10.0.68
Running on/withPlatform Versions
Motorola
T200
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
T201 Firmware
Before 4.10.0.68
Running on/withPlatform Versions
Motorola
T201
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
T204 Firmware
Before 3.28.0.166
Running on/withPlatform Versions
Motorola
T204
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
T205 Firmware
Before 4.12.0.62
Running on/withPlatform Versions
Motorola
T205
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
T290 Firmware
Before 4.4.0.80
Running on/withPlatform Versions
Motorola
T290
All versions

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.