← Database

CVE-2021-43939

HIGH CVSS: 8.8 Published: 2022-04-28 Modified: 2026-06-17

Description

Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests directly to the desired endpoints.

Affected Platforms

Smartptt Smartptt Scada

Weakness Type

CWE-285, NVD-CWE-Other

References