CVE-2021-38701: Motorola t008 Firmware

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Certain Motorola Solutions Avigilon devices allow XSS in the administrative UI. This affects T200/201 before 4.10.0.68; T290 before 4.4.0.80; T008 before 2.2.0.86; T205 before 4.12.0.62; T204 before 3.28.0.166; and T100, T101, T102, and T103 before 2.6.0.180.

Affected products

• Motorola t008 Firmware: before 2.2.0.86 (fixed in 2.2.0.86)
• Motorola t100 Firmware: before 2.6.0.180 (fixed in 2.6.0.180)
• Motorola t101 Firmware: before 2.6.0.180 (fixed in 2.6.0.180)
• Motorola t102 Firmware: before 2.6.0.180 (fixed in 2.6.0.180)
• Motorola t103 Firmware: before 2.6.0.180 (fixed in 2.6.0.180)
• Motorola t200 Firmware: before 4.10.0.68 (fixed in 4.10.0.68)
• Motorola t201 Firmware: before 4.10.0.68 (fixed in 4.10.0.68)
• Motorola t204 Firmware: before 3.28.0.166 (fixed in 3.28.0.166)
• Motorola t205 Firmware: before 4.12.0.62 (fixed in 4.12.0.62)
• Motorola t290 Firmware: before 4.4.0.80 (fixed in 4.4.0.80)

Published 2021-12-15. Last modified 2026-06-17.