CVE-2021-43938

9.8 criticalEPSS 1.1%

Critical (9.8) in smartptt scada server. EPSS 1.1% chance of exploitation in the next 30 days.

Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWEs: CWE-862, CWE-200
Published: 2022-04-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

smartptt:scada_server

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-05
https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-05

Check your stack JSON