CVE-2021-43930: medium-severity vulnerability in Elcomplus SmartPTT
Elcomplus SmartPtt Path Traversal
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.9epss 1.0%
Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and potentially download arbitrary files from the system.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
Elcomplus · SmartPTTRelated CVEs — Elcomplus SmartPTT
In the same product, most dangerous first.