Elcomplus SmartPTT SCADA
Successful exploitation of these vulnerabilities could provide attackers a way to traverse the file system to access files or directories that are outside of the restricted directory; allow the upload or transfer files of dangerous types that can be automatically processed within the product's environment; allow an unauthorized access to an action or a resource; or allow a user to store dangerous data in a trusted database.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-43939US | high8.8 | — | ||
Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests directly to the desired endpoints. | ||||
| CVE-2021-43934US | critical9.8 | — | ||
Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload arbitrary files. | ||||
| CVE-2021-43932US | medium6.1 | — | ||
Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page. | ||||
| CVE-2021-43930US | medium4.9 | — | ||
Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and pot… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationSmartPTT SCADA
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex - MitigationSmartPTT SCADA
Elcomplus has released an update to fix these vulnerabilities and recommends users upgrade to Version 2.3.4 or later.
https://drive.google.com/drive/folders/1ovX1IdMKtVDnrBcSbKkY40e57Ib2bIex
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan