What’s Vulnerable › Vulnerabilities

CVE-2021-43930: Elcomplus SmartPtt Path Traversal

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-28 · updated 2026-06-17
• Weakness: CWE-22

Description

Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and potentially download arbitrary files from the system.

Affected products

• Elcomplus SmartPTT: 1.1

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-04
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-04

Get alerted when CVE-2021-43930 or the next vulnerability affects your stack