Description
Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attacks and specify arbitrary files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elcomplus | SmartICS | v2.3.4.0 | — |
Advisories 1
- ICSA-22-174-05 Elcomplus SmartICS CISA ICS & IT advisories · Jun 23, 2022