Elcomplus SmartPTT SCADA
Successful exploitation of these vulnerabilities could provide attackers a way to traverse the file system to access files or directories that are outside of the restricted directory; allow the upload or transfer files of dangerous types that can be automatically processed within the product's environment; allow an unauthorized access to an action or a resource; or allow a user to store dangerous data in a trusted database.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-43939US | high8.8 | — | ||
Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests directly to the desired endpoints. | ||||
| CVE-2021-43934US | critical9.8 | — | ||
Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload arbitrary files. | ||||
| CVE-2021-43932US | medium6.1 | — | ||
Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page. | ||||
| CVE-2021-43930US | medium4.9 | — | ||
Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and pot… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationSmartPTT SCADA
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan