PT-2021-6928

Name of the Vulnerable Software and Affected Versions Elcomplus SmartPTT affected versions not specified Description The issue is related to inadequate validation of download requests in the backup and restore system, allowing malicious users to perform path traversal attacks. This could enable...

PT-2021-6931

Name of the Vulnerable Software and Affected Versions Elcomplus SmartPTT SCADA Server affected versions not specified Description The issue is related to insufficient verification of the source of HTTP requests. This can allow a remote attacker to perform a CSRF attack using a specially crafted w...

PT-2021-6927

Name of the Vulnerable Software and Affected Versions Elcomplus SmartPTT affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the update loading function of the scada-server. This could allow a remote attacker to execute arbitrary cod...

PT-2021-6929

Name of the Vulnerable Software and Affected Versions Elcomplus SmartPTT SCADA Server affected versions not specified Description The issue is related to the disclosure of information. It allows a remote attacker to reveal protected information by requesting various files from the server without...

PT-2021-6932

Name of the Vulnerable Software and Affected Versions Elcomplus SmartPTT affected versions not specified Description The issue is related to the injection of JavaScript code into a specific parameter, which can be executed when accessing the dashboard or the main page. This can allow a remote...