Description
Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload arbitrary files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elcomplus | SmartPTT | 1.1 | — |
Advisories 2
- ICSA-22-109-05 Elcomplus SmartPTT SCADA Server CISA ICS & IT advisories · Apr 19, 2022
- ICSA-22-109-04 Elcomplus SmartPTT SCADA CISA ICS & IT advisories · Apr 19, 2022