Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Smartics Clear all filters
TI-2022-01949 CVE-2022-2106 · GHSA-qrhx-g8ph-h5v3

Elcomplus SmartICS Path Traversal

Priority LOW 19

Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attacks and specify arbitrary files.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00666 Published 2022-06-27 No fix listed CWE-23
TI-2022-01981 CVE-2022-2140 · GHSA-cpp5-m3j9-4ch3

Elcomplus SmartICS Cross-site Scripting

Priority MEDIUM 42

Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject arbitrary code into specific parameters.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00854 Published 2022-06-27 No fix listed CWE-79
TI-2022-01932 CVE-2022-2088 · GHSA-fwqr-mxjf-9x7q

Elcomplus SmartICS Access Control

Priority LOW 32

An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartICS v2.3.4.0.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00827 Published 2022-06-27 No fix listed CWE-284