smartptt records

7 published records for vendor smartptt.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2021-43934No exploit	Elcomplus SmartPtt Unrestricted Upload of File with Dangerous Typesmartptt · smartptt scada · CWE-434 Pre-auth File upload	Critical9.8	—	1.1%	Apr 28, 2022
39Monitor	CVE-2021-43938No exploit	Elcomplus SmartPTT SCADA Server Information Exposuresmartptt · scada server · CWE-200 Pre-auth Info leak	Critical9.8	—	1.1%	Apr 29, 2022
35Monitor	CVE-2021-43939No exploit	Elcomplus SmartPtt Improper Authorizationsmartptt · smartptt scada · CWE-285 Broken access control (IDOR)	High8.8	—	0.6%	Apr 28, 2022
35Monitor	CVE-2021-43937No exploit	Elcomplus SmartPTT SCADA Server Cross-site Request Forgerysmartptt · scada server · CWE-200 Pre-auth CSRF Info leak	High8.8	—	0.3%	Apr 29, 2022
29Monitor	CVE-2023-30459Proof of concept	SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator privileges) by writing a malicious C# script and exsmartptt · smartptt scada RCE	High7.2	—	2.1%	Apr 14, 2023
24Monitor	CVE-2021-43932No exploit	Elcomplus SmartPtt Cross-site Scriptingsmartptt · smartptt scada · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Apr 28, 2022
19Monitor	CVE-2021-43930No exploit	Elcomplus SmartPtt Path Traversalsmartptt · smartptt scada · CWE-22 Path traversal	Medium4.9	—	1.0%	Apr 28, 2022

CVE-2021-43934
39Monitor
Elcomplus SmartPtt Unrestricted Upload of File with Dangerous Type
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- File upload
smartptt · smartptt scadaApr 28, 2022
CVE-2021-43938
39Monitor
Elcomplus SmartPTT SCADA Server Information Exposure
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Info leak
smartptt · scada serverApr 29, 2022
CVE-2021-43939
35Monitor
Elcomplus SmartPtt Improper Authorization
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
smartptt · smartptt scadaApr 28, 2022
CVE-2021-43937
35Monitor
Elcomplus SmartPTT SCADA Server Cross-site Request Forgery
HighCVSS 8.8No exploitEPSS 0%
smartptt · scada serverApr 29, 2022
CVE-2023-30459
29Monitor
SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator privileges) by writing a malicious C# script and ex
HighCVSS 7.2Proof of conceptEPSS 2%
- RCE
smartptt · smartptt scadaApr 14, 2023
CVE-2021-43932
24Monitor
Elcomplus SmartPtt Cross-site Scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
smartptt · smartptt scadaApr 28, 2022
CVE-2021-43930
19Monitor
Elcomplus SmartPtt Path Traversal
MediumCVSS 4.9No exploitEPSS 1%
- Path traversal
smartptt · smartptt scadaApr 28, 2022