CVE-2021-43938

—

CVSS 3.1

9.8 critical

EPSS

1%p63

Published

Apr 29, 2022 (Apr 29, 2022)

Modified

Jun 17, 2026

Description

Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization.

Vendors: smartptt
Products: scada server
Weakness: CWE-200, CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.