CVE-2021-38701
Estado: ModificadaMedia (4.8)—
Certain Motorola Solutions Avigilon devices allow XSS in the administrative UI. This affects T200/201 before 4.10.0.68; T290 before 4.4.0.80; T008 before 2.2.0.86; T205 before 4.12.0.62; T204 before 3.28.0.166; and T100, T101, T102, and T103 before 2.6.0.180.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
- Puntuación base: 4.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.45%
- Percentil entre todas las CVEs puntuadas: 37
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (10)
CWE
- CWE-79
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-38701",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 4.8,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "HIGH",
"confidentialityImpact": "LOW"
},
"impactScore": 2.7,
"exploitabilityScore": 1.7
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2021-12-15T07:15:07.027",
"references": [
{
"url": "https://support.avigilon.com/s/feed/0D54y00006l9eCMCAY",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://www.motorolasolutions.com/en_us/about/trust-center/security.html",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://support.avigilon.com/s/feed/0D54y00006l9eCMCAY",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.motorolasolutions.com/en_us/about/trust-center/security.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Certain Motorola Solutions Avigilon devices allow XSS in the administrative UI. This affects T200/201 before 4.10.0.68; T290 before 4.4.0.80; T008 before 2.2.0.86; T205 before 4.12.0.62; T204 before 3.28.0.166; and T100, T101, T102, and T103 before 2.6.0.180."
},
{
"lang": "es",
"value": "Determinados dispositivos Avigilon de Motorola Solutions permiten un ataque de tipo XSS en la interfaz de usuario administrativa. Esto afecta a dispositivos T200/201 versiones anteriores a 4.10.0.68; T290 versiones anteriores a 4.4.0.80; T008 versiones anteriores a 2.2.0.86; T205 versiones anteriores a 4.12.0.62; T204 versiones anteriores a 3.28.0.166; y T100, T101, T102 y T103 versiones anteriores a 2.6.0.180"
}
],
"lastModified": "2026-06-17T04:02:37.127",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:motorola:t008_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD42F596-151C-43BF-821C-1157F58EF750",
"versionEndExcluding": "2.2.0.86"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:motorola:t008:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "14021E52-2D46-4C9F-A004-85DA30D53C0B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:motorola:t100_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F78434DC-8D0E-4ABA-8FF2-84611D215F96",
"versionEndExcluding": "2.6.0.180"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:motorola:t100:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8AF5D73D-15F4-4FAF-9BCA-3C43B992DBF6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:motorola:t101_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4690115-A15D-4984-9D1C-F64D2760A98E",
"versionEndExcluding": "2.6.0.180"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:motorola:t101:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "86B178C9-6B65-4175-845B-54468AF25FF4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:motorola:t102_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87B4B6E2-377F-4311-A74E-422AD6C00559",
"versionEndExcluding": "2.6.0.180"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:motorola:t102:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F47D0AE7-05E3-4E9A-A948-591500CBA5C9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:motorola:t103_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E638D409-219A-4FAA-BFDE-97DC142698CD",
"versionEndExcluding": "2.6.0.180"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:motorola:t103:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "985191A5-6159-4E74-9522-0F1CD6C66A4E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:motorola:t200_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "748E41DD-08E0-4D31-B4F6-08475B89303D",
"versionEndExcluding": "4.10.0.68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:motorola:t200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E43B84A6-833D-4AA1-9BD5-860521BF4297"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:motorola:t201_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "384EC8FE-DF26-4707-807C-5CF33D8283A0",
"versionEndExcluding": "4.10.0.68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:motorola:t201:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CAC7B880-5BE4-498C-9204-26ABA5EA29F2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:motorola:t204_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFAB44E1-E0BA-40AF-AEB8-6A6E69BE400D",
"versionEndExcluding": "3.28.0.166"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:motorola:t204:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "10037964-91DC-44C6-8CBE-69BCD3B8622D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:motorola:t205_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49ADCACA-11CF-42D8-811D-2279F069165F",
"versionEndExcluding": "4.12.0.62"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:motorola:t205:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0576B7DA-85AA-4312-ABE4-82C1B68C1747"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:motorola:t290_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBF7DF80-0D08-4205-B1BF-1AEBAB37B9FC",
"versionEndExcluding": "4.4.0.80"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:motorola:t290:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1D8989C8-27A7-48EE-A1AE-F1F5AF47439F"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}