Search vulnerabilities

Results 2

Export CSV
CVE-2021-43937

Elcomplus SmartPTT SCADA Server Cross-site Request Forgery

Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2021-43938

Elcomplus SmartPTT SCADA Server Information Exposure

Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization.

CVSS 3.1 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Products