Skip to content
OpenAdvisories

Vendor

Elcomplus

9 known vulnerabilities.

Products

SmartPTT 4 SmartICS 3 SmartPTT SCADA Server 2 SmartPTT SCADA 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2021-43932

    Elcomplus SmartPtt Cross-site Scripting

    Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page.

    Elcomplus SmartPTT
  • Critical 9.8
    CVE-2021-43934

    Elcomplus SmartPtt Unrestricted Upload of File with Dangerous Type

    Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload arbitrary files.

    Elcomplus SmartPTT