POWERCOM CO., LTD.

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

POWERCOM CO., LTD. records in CISA KEV

No POWERCOM CO., LTD. vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Upsmon Pro · all components

TI-2022-17826 CVE-2022-38119 · GHSA-wrjq-c6h8-5hjq

MEDIUM 45

UPSMON Pro login function has insufficient authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01248 Published 2022-11-10 No fix listed CWE-287

TI-2022-17827 CVE-2022-38120 · GHSA-3jhh-jx96-63p5

LOW 39

UPSMON PRO’s has a path traversal vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.07742 Published 2022-11-10 No fix listed CWE-22

TI-2022-17828 CVE-2022-38121 · GHSA-7922-hx9c-296c

LOW 38

UPSMON PRO configuration file stores user password in plaintext under public user directory.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04708 Published 2022-11-10 No fix listed CWE-522

TI-2022-17829 CVE-2022-38122 · GHSA-xmmr-4rx9-36g5

LOW 34

UPSMON PRO transmits sensitive data in cleartext over HTTP protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00622 Published 2022-11-10 No fix listed CWE-319