← Database

CVE-2021-35956

MEDIUM CVSS: 5.4 Published: 2021-06-30 Modified: 2026-06-17

Description

Stored cross-site scripting (XSS) in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote authenticated attackers to introduce arbitrary JavaScript via the Sensor Description, Email (from/to/cc), System Name, and System Location fields.

Affected Platforms

Akcp Sensorprobe8-X60 FirmwareAkcp Sensorprobe8-X20 FirmwareAkcp Sensorprobe8-X60Akcp Sensorprobe8 FirmwareAkcp Sensorprobe2Akcp Sensorprobe4 FirmwareAkcp Sensorprobe2 FirmwareAkcp Sensorprobe8-X20Akcp Sensorprobe4Akcp Sensorprobe8

Weakness Type

CWE-79

References