Critical severity9.8NVD Advisory· Published Apr 28, 2022· Updated Jun 17, 2026

CVE-2021-43934

Description

Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload arbitrary files.

Affected products

Elcomplus/SmartPTTllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 1.1

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-22-109-04nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000