Medium severity4.9NVD Advisory· Published Apr 28, 2022· Updated Jun 17, 2026

CVE-2021-43930

Description

Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and potentially download arbitrary files from the system.

Affected products

Elcomplus/SmartPTTllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 1.1

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-22-109-04nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000