CVE-2021-32927 - CVE House

Status published High CVE-2021-32927

Uffizio GPS Tracker Cross-site Scripting

7.1 CVSS

Vulnerability Description

An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS Tracker.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-32927

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Harshit Shukla reported these vulnerabilities to CISA.

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-287-02

More from Uffizio

View All →

CVE-2021-32929

Uffizio GPS Tracker Cross-site Request Forgery

Medium 4.3

Affected Vendor

Uffizio

View all reports →

Affected Software

GPS Tracker

Vulnerable Versions:

All

Timeline

Official Publish: April 22nd, 2022

Last Modified: April 16th, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Weaknesses (CWE)

CWE-79

MITRE ATT&CK TTPs

T1189 Drive-by Compromise

Initial Access

T1059.007 JavaScript

Execution

T1539 Steal Web Session Cookie

Collection

T1213 Data from Information Repositories