Smartptt Smartptt Scada
5 CVEs affecting Smartptt Smartptt Scada. Latest disclosed: 2023-04-14. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43934 | Critical | 9.8 | 2022-04-28 | Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload… |
CVE-2021-43932 | Critical | 9.0 | 2022-04-28 | Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main… |
CVE-2021-43939 | High | 8.8 | 2022-04-28 | Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests directly to the desired… |
CVE-2023-30459 | High | 7.2 | 2023-04-14 | SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator privileges) by writing a malicious C# script and executing it on the s… |
CVE-2021-43930 | Medium | 4.9 | 2022-04-28 | Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path trav… |