CVE-2021-43938

Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization...

Authorization

Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization...

CVE-2021-43937 Elcomplus SmartPTT SCADA Server Cross-site Request Forgery

Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request...

CVE-2021-43938: Exposure of Sensitive Information to an Unauthorized Actor

Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization...

CVE-2021-43937: Exposure of Sensitive Information to an Unauthorized Actor

Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request...

PT-2021-6929

Name of the Vulnerable Software and Affected Versions Elcomplus SmartPTT SCADA Server affected versions not specified Description The issue is related to the disclosure of information. It allows a remote attacker to reveal protected information by requesting various files from the server without...

PT-2021-6931

Name of the Vulnerable Software and Affected Versions Elcomplus SmartPTT SCADA Server affected versions not specified Description The issue is related to insufficient verification of the source of HTTP requests. This can allow a remote attacker to perform a CSRF attack using a specially crafted w...