← CVE Intelligence

CVE-2022-2106

Elcomplus SmartICS Path Traversal PUBLISHED

Description (CNA)

Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attacks and specify arbitrary files.

Affected (CNA)

Vendor / productVersions
Elcomplus / SmartICSaffected v2.3.4.0

CWE

CWE-23

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.