Upspowercom Upsmon Pro
4 CVEs affecting Upspowercom Upsmon Pro. Latest disclosed: 2022-11-10. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-38119 | Critical | 9.8 | 2022-11-10 | UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get a… |
CVE-2022-38122 | High | 7.5 | 2022-11-10 | UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data. |
CVE-2022-38121 | Medium | 6.5 | 2022-11-10 | UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users… |
CVE-2022-38120 | Medium | 6.5 | 2022-11-10 | UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and acce… |