Elcomplus SmartPTT SCADA Server
Successful exploitation of these vulnerabilities could allow an unauthorized user to store dangerous data in a trusted database; potentially exposing sensitive information; allow malicious users to upload arbitrary files; provide attackers a way to traverse the file system to access files or directories that are outside of the restricted directory; or result in exposure of data or unintended code execution.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-43938US | critical9.8OT elevated | — | ||
Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization. | ||||
| CVE-2021-43937US | high8.8 | — | ||
Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who… | ||||
| CVE-2021-43934US | critical9.8 | — | ||
Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload arbitrary files. | ||||
| CVE-2021-43932US | medium6.1 | — | ||
Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page. | ||||
| CVE-2021-43930US | medium4.9 | — | ||
Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and pot… | ||||
references
External citations — patches, advisories, analysis.
remediations (5)
- MitigationSmartPTT SCADA Server
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA Server
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA Server
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA Server
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA Server
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan