Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2022-2140
Disclosure Date: June 27, 2022 (last updated February 24, 2025)
Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject arbitrary code into specific parameters.
0
Attacker Value
Unknown
CVE-2022-2106
Disclosure Date: June 27, 2022 (last updated February 24, 2025)
Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attacks and specify arbitrary files.
0
Attacker Value
Unknown
CVE-2022-2088
Disclosure Date: June 27, 2022 (last updated February 24, 2025)
An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartICS v2.3.4.0.
0
