Elcomplus SmartPTT SCADA Server
Successful exploitation of these vulnerabilities could allow an unauthorized user to store dangerous data in a trusted database; potentially exposing sensitive information; allow malicious users to upload arbitrary files; provide attackers a way to traverse the file system to access files or directories that are outside of the restricted directory; or result in exposure of data or unintended code execution.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-43938US | critical9.8OT erhöht | — | ||
Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization. | ||||
| CVE-2021-43937US | high8.8 | — | ||
Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who… | ||||
| CVE-2021-43934US | critical9.8 | — | ||
Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload arbitrary files. | ||||
| CVE-2021-43932US | medium6.1 | — | ||
Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page. | ||||
| CVE-2021-43930US | medium4.9 | — | ||
Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and pot… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (5)
- MitigationSmartPTT SCADA Server
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA Server
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA Server
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA Server
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA Server
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan