Read the docs

Smartics

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Smartics records in CISA KEV

No Smartics vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smartics 3 records MEDIUM

Records

3 records

TI-2022-01981 CVE-2022-2140 · GHSA-cpp5-m3j9-4ch3

Elcomplus SmartICS Cross-site Scripting

Priority MEDIUM 42

Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject arbitrary code into specific parameters.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00854 Published 2022-06-27 No fix listed CWE-79
TI-2022-01932 CVE-2022-2088 · GHSA-fwqr-mxjf-9x7q

Elcomplus SmartICS Access Control

Priority LOW 32

An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartICS v2.3.4.0.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00827 Published 2022-06-27 No fix listed CWE-284
TI-2022-01949 CVE-2022-2106 · GHSA-qrhx-g8ph-h5v3

Elcomplus SmartICS Path Traversal

Priority LOW 19

Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attacks and specify arbitrary files.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00666 Published 2022-06-27 No fix listed CWE-23
Open these records in search →