CVE-2021-43930CWE-22

Elcomplus SmartPtt Path Traversal

Medium · published April 28, 2022

CVSS v3.1
4.9
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and potentially download arbitrary files from the system.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01038 · 63.6th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-04-28T14:53Z
EPSS history
Timeline
  • 28 APR 14:53Z
    Elcomplus SmartPtt Path Traversal
    cvelistv5