GCVE - cpe:2.3:a:smartptt:smartptt_scada:1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:smartptt:smartptt_scada:1.1:*:*:*:*:*:*:*

part: a version: 1.1 update: *

Vendor	Smartptt (`e091bae1-f1b2-5033-b8e8-7d9acf7c94b5`)
Product	Smartptt Scada (`e81b4c98-3d3b-5ff6-a5a3-312fbdc5a093`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-30459`	vulnerable	2026-06-08 06:04:39.408954	Details available SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator privileges) by writing a malicious C# script and executing it on the server (via server settings in the administrator control panel on port 8101, by default). Published: 2023-04-14T00:00:00.000Z Updated: 2025-02-06T21:00:59.768Z Open on db.gcve.eu Reference links https://smartptt.com https://github.com/Toxich4/CVE-2023-30459	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43939`	vulnerable	2026-06-08 05:36:44.623234	Elcomplus SmartPtt Improper Authorization HIGH (8.8) Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests directly to the desired endpoints. Published: 2022-04-28T14:55:52.000Z Updated: 2025-04-16T17:54:55.849Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-04	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43934`	vulnerable	2026-06-08 05:36:44.600311	Elcomplus SmartPtt Unrestricted Upload of File with Dangerous Type CRITICAL (9.8) Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload arbitrary files. Published: 2022-04-28T14:54:20.000Z Updated: 2025-04-16T16:27:44.690Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-04	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43932`	vulnerable	2026-06-08 05:36:44.597883	Elcomplus SmartPtt Cross-site Scripting CRITICAL (9) Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page. Published: 2022-04-28T14:54:57.000Z Updated: 2025-04-16T17:55:04.470Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-04	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43930`	vulnerable	2026-06-08 05:36:44.594348	Elcomplus SmartPtt Path Traversal MEDIUM (4.9) Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and potentially download arbitrary files from the system. Published: 2022-04-28T14:53:29.000Z Updated: 2025-04-16T16:27:52.498Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-04	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.