Vulnerabilities

TI-2022-17829 CVE-2022-38122 · GHSA-xmmr-4rx9-36g5

POWERCOM CO., LTD. UPSMON PRO - Cleartext Transmission of Sensitive Information

LOW 34

UPSMON PRO transmits sensitive data in cleartext over HTTP protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00622 Published 2022-11-10 No fix listed CWE-319

TI-2022-17828 CVE-2022-38121 · GHSA-7922-hx9c-296c

LOW 38

UPSMON PRO configuration file stores user password in plaintext under public user directory.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04708 Published 2022-11-10 No fix listed CWE-522

TI-2022-17827 CVE-2022-38120 · GHSA-3jhh-jx96-63p5

LOW 39

UPSMON PRO’s has a path traversal vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.07742 Published 2022-11-10 No fix listed CWE-22

TI-2022-17826 CVE-2022-38119 · GHSA-wrjq-c6h8-5hjq

MEDIUM 45

UPSMON Pro login function has insufficient authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01248 Published 2022-11-10 No fix listed CWE-287