CVE-2022-2140

Summary

Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject arbitrary code into specific parameters.

Affected Software

VendorProductVersion RangeStatus
ElcomplusSmartICSv2.3.4.0affected

Weaknesses

  • CWE-79: CWE-79: Cross-site Scripting

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References