CVE-2021-43938CWE-200

Elcomplus SmartPTT SCADA Server Information Exposure

High · published April 29, 2022

CVSS v3.1
8.1
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01101 · 65.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-04-29T15:18Z
EPSS history
Timeline
  • 29 APR 15:18Z
    Elcomplus SmartPTT SCADA Server Information Exposure
    cvelistv5