Lucene search
IcscertCVELIST:CVE-2021-43939HistoryApr 28, 2022 - 2:55 p.m.
CVE-2021-43939 Elcomplus SmartPtt Improper Authorization
2022-04-2814:55:52
CWE-285
icscert
www.cve.org
4
cve-2021-43939
elcomplus smartptt
improper authorization
CVSS3
8.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
42.8%
Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests directly to the desired endpoints.
CNA Affected
[
{
"product": "SmartPTT",
"vendor": "Elcomplus",
"versions": [
{
"status": "affected",
"version": "1.1"
}
]
}
]Related
prion
prion
Authorization
2022-04-28 15:15:00
cnvd
cnvd
Elcomplus SmartPPT Licensing Issue Vulnerability
2022-04-21 00:00:00
nvd
nvd
CVE-2021-43939
2022-04-28 15:15:09
cve
cve
CVE-2021-43939
2022-04-28 15:15:09
ics
ics
Elcomplus SmartPTT SCADA
2022-04-25 12:00:00
CVSS3
8.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
42.8%
Related for CVELIST:CVE-2021-43939