Lucene search

Smartics Security Vulnerabilities

cve

CVE-2022-2088

An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartICS v2.3.4.0.

6.8CVSS

4.9AI Score

0.001EPSS

2022-06-27 05:15 PM

cve

CVE-2022-2106

Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attacks and specify arbitrary files.

3.8CVSS

4AI Score

0.001EPSS

2022-06-27 05:15 PM

cve

CVE-2022-2140

Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject arbitrary code into specific parameters.

9CVSS

9AI Score

0.001EPSS

2022-06-27 05:15 PM