CVEvulnerability

CVE-2021-38701

4.8 MEDIUM Published 2021-12-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-12-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Certain Motorola Solutions Avigilon devices allow XSS in the administrative UI. This affects T200/201 before 4.10.0.68; T290 before 4.4.0.80; T008 before 2.2.0.86; T205 before 4.12.0.62; T204 before 3.28.0.166; and T100, T101, T102, and T103 before 2.6.0.180.

Affected configurations

• motorola t008 firmware (< 2.2.0.86) • motorola t100 firmware (< 2.6.0.180) • motorola t101 firmware (< 2.6.0.180) • motorola t102 firmware (< 2.6.0.180) • motorola t103 firmware (< 2.6.0.180) • motorola t200 firmware (< 4.10.0.68) • motorola t201 firmware (< 4.10.0.68) • motorola t204 firmware (< 3.28.0.166) • motorola t205 firmware (< 4.12.0.62) • motorola t290 firmware (< 4.4.0.80)

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References