Description
Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject arbitrary code into specific parameters.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elcomplus | SmartICS | v2.3.4.0 | — |
Advisories 1
- ICSA-22-174-05 Elcomplus SmartICS CISA ICS & IT advisories · Jun 23, 2022