CVE-2021-20660

medium · 6.1

Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors.

6.1

CVSS

47.2%

EPSS (exploit prob.)

99th

EPSS percentile

2021-02-24

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses

CWE-79

Affected products

Vendor	Product	Affected versions
contec	sv-cpt-mc310_firmware	< 6.5
contec	sv-cpt-mc310	all versions

Check a specific version with /api/v1/cve/match.

References

https://jvn.jp/en/jp/JVN37417423/index.html
https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf
https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf
https://jvn.jp/en/jp/JVN37417423/index.html
https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf
https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-20660