6.8
CVSSv2

CVE-2021-43937

Published: 29/04/2022 Updated: 11/05/2022
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

smartptt scada server 1.4

ICS Advisories

Elcomplus SmartPPT SCADA Server
Critical Infrastructure Sectors: Communications