Description
Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests directly to the desired endpoints.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elcomplus | SmartPTT | 1.1 | — |
Advisories 1
- ICSA-22-109-04 Elcomplus SmartPTT SCADA CISA ICS & IT advisories · Apr 19, 2022