CVE-2021-43938: Smartptt Scada Server

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization.

Affected products

• Smartptt Scada Server: version 1.4 only

Published 2022-04-29. Last modified 2026-06-17.