Skip to content
OpenAdvisories

Vendor

Elcomplus

9 known vulnerabilities.

Products

SmartPTT 4 SmartICS 3 SmartPTT SCADA Server 2 SmartPTT SCADA 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2022-2140

    Elcomplus SmartICS Cross-site Scripting

    Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject arbitrary code into specific parameters.

    Elcomplus SmartICS
  • High 8.1
    CVE-2021-43938

    Elcomplus SmartPTT SCADA Server Information Exposure

    Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization.

    Elcomplus SmartPTT SCADA Server
  • High 7.6
    CVE-2021-43937

    Elcomplus SmartPTT SCADA Server Cross-site Request Forgery

    Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

    Elcomplus SmartPTT SCADA Server
  • High 8.8
    CVE-2021-43939

    Elcomplus SmartPtt Improper Authorization

    Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests directly to the desired endpoints.

    Elcomplus SmartPTT