Code injection

2022-04-2815:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.9%

JSON

Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page.

CPENameOperatorVersion
smartptt_scadaeq1.1

CPE	Name	Operator	Version
	smartptt_scada	eq	1.1

References

www.cisa.gov/uscert/ics/advisories/icsa-22-109-04