The vulnerability of the Elcomplus SmartPPT SCADA server, related to information disclosure, allows a intruder to expose the protected information.

The vulnerability of the Elcomplus SmartPPT SCADA server is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the Elcomplus SmartPPT SCADA server, related to insufficient verification of the HTTP request source, allows a hacker to execute a CSRF attack.

The vulnerability of the Elcomplus SmartPPT SCADA server is related to insufficient security checks on the HTTP request source. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack using a specially created web page...

The vulnerability of the update loading function of the Elcomplus SmartPPT server allows a hacker to execute arbitrary code.

The vulnerability of the update loading function of the Elcomplus SmartPPT server lies in the ability to download files of a dangerous type without limitation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Elcomplus SmartPPT Information Disclosure Vulnerability

Elcomplus SmartPPT SCADA Server is an integrated voice and data scheduling software from Elcomplus, Inc. Elcomplus SmartPPT SCADA Server 1.4 is vulnerable to an information disclosure vulnerability that could be exploited by an unauthenticated attacker to request various files from the server...

Elcomplus SmartPPT Licensing Issue Vulnerability

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus, U.S.A. An authorization issue vulnerability exists in Elcomplus SmartPPT, which can be exploited by a low-authentication attacker to access higher-level administrative authorizations by sending a request direct...

Elcomplus SmartPPT 安全漏洞

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus, U.S.A. An authorization issue vulnerability exists in Elcomplus SmartPPT, which can be exploited by a low-authentication attacker to access higher-level administrative authorizations by sending a request direct...

Elcomplus SmartPPT 跨站请求伪造漏洞

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus USA. Elcomplus SmartPPT suffers from a cross-site request forgery vulnerability that stems from a web application that cannot or does not adequately verify that a user submitting a request has intentionally...

Elcomplus SmartPPT 代码问题漏洞

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus USA. A code issue vulnerability exists in Elcomplus SmartPPT that stems from a lack of restriction on the size or number of files that can be uploaded. An attacker could exploit this vulnerability to upload or...

Elcomplus SmartPPT 路径遍历漏洞

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus USA. A path traversal vulnerability exists in Elcomplus SmartPPT that stems from the software using external input to construct a pathname that should be located in a restricted directory, but it fails to...

Elcomplus SmartPPT 跨站脚本漏洞

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus USA. A cross-site scripting vulnerability exists in SmartPPT SCADA Server version v1.4, which allows an authenticated attacker to inject arbitrary JavaScript into critical parameters...

Elcomplus SmartPPT 信息泄露漏洞

Elcomplus SmartPPT SCADA Server is an integrated voice and data scheduling software from Elcomplus, Inc. Elcomplus SmartPPT SCADA Server 1.4 is vulnerable to an information disclosure vulnerability that could be exploited by an unauthenticated attacker to request various files from the server...

PT-2021-6930 · Elcomplus · Elcomplus Smartptt

Name of the Vulnerable Software and Affected Versions: Elcomplus SmartPTT affected versions not specified Description: The issue is related to authorization errors in the Elcomplus SmartPTT scada-server, allowing a low-authenticated user to access higher-level administration authorization. This c...