CVE-2021-35956: Akcp SENSORPROBE2 Firmware

Medium severity, CVSS 5.4. EPSS: 3.2% chance of exploitation in the next 30 days.

Stored cross-site scripting (XSS) in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote authenticated attackers to introduce arbitrary JavaScript via the Sensor Description, Email (from/to/cc), System Name, and System Location fields.

Affected products

• Akcp SENSORPROBE2 Firmware: before sp480-20210624 (fixed in sp480-20210624)
• Akcp SENSORPROBE4 Firmware: before sp480-20210624 (fixed in sp480-20210624)
• Akcp SENSORPROBE8-x20 Firmware: before sp480-20210624 (fixed in sp480-20210624)
• Akcp SENSORPROBE8-x60 Firmware: before sp480-20210624 (fixed in sp480-20210624)
• Akcp SENSORPROBE8 Firmware: before sp480-20210624 (fixed in sp480-20210624)

Published 2021-06-30. Last modified 2026-06-17.