CVE-2022-2106: Smartics

Low severity, CVSS 2.7. EPSS: 0.7% chance of exploitation in the next 30 days.

Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attacks and specify arbitrary files.

Affected products

• Smartics Smartics: version 2.3.4.0 only

Published 2022-06-27. Last modified 2026-06-17.