TVN ID	TVN-202106001
CVE ID	CVE-2021-32536
CVSS	6.1 (Medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products	MCU Technologies MCUsystem version 5.5
Description	The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks.
Solution	Contact tech support from MCU Technologies.
Credit	Lai, Yu-Jen（CHT Security）
Public Date	2021-06-18