Description
Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elcomplus | SmartPTT | 1.1 | — |
Advisories 2
- ICSA-22-109-05 Elcomplus SmartPTT SCADA Server CISA ICS & IT advisories · Apr 19, 2022
- ICSA-22-109-04 Elcomplus SmartPTT SCADA CISA ICS & IT advisories · Apr 19, 2022