CVE-2021-38701

Name of the Vulnerable Software and Affected Versions Avigilon T200/201 versions prior to 4.10.0.68 Avigilon T290 versions prior to 4.4.0.80 Avigilon T008 versions prior to 2.2.0.86 Avigilon T205 versions prior to 4.12.0.62 Avigilon T204 versions prior to 3.28.0.166 Avigilon T100, T101, T102, and T103 versions prior to 2.6.0.180

Description The issue affects the administrative UI of certain Motorola Solutions Avigilon devices, allowing cross-site scripting (XSS).

Recommendations For Avigilon T200/201 versions prior to 4.10.0.68, update to version 4.10.0.68 or later. For Avigilon T290 versions prior to 4.4.0.80, update to version 4.4.0.80 or later. For Avigilon T008 versions prior to 2.2.0.86, update to version 2.2.0.86 or later. For Avigilon T205 versions prior to 4.12.0.62, update to version 4.12.0.62 or later. For Avigilon T204 versions prior to 3.28.0.166, update to version 3.28.0.166 or later. For Avigilon T100, T101, T102, and T103 versions prior to 2.6.0.180, update to version 2.6.0.180 or later.