https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-2140.htmlhttps://patchthecve.com/cve/CVE-2022-2140.htmlWed, 17 Jun 2026 04:41:22 +0000HIGH 8.8: Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject arbitrary code into specific parameters.https://patchthecve.com/cve/CVE-2022-2106.htmlhttps://patchthecve.com/cve/CVE-2022-2106.htmlWed, 17 Jun 2026 04:41:18 +0000LOW 3.8: Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attacks and specify arbitrary files.https://patchthecve.com/cve/CVE-2022-2088.htmlhttps://patchthecve.com/cve/CVE-2022-2088.htmlWed, 17 Jun 2026 04:41:15 +0000MEDIUM 6.8: An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartICS v2.3.4.0.