Lucene search
HistoryNov 10, 2022 - 3:15 p.m.
CVE-2022-38122
cve-2022-38122
upsmon pro
cleartext transmission
http protocol
vulnerability
sensitive data
unauthenticated access
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.2%
UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.
Affected configurations
Node
upspowercomupsmon_proMatch2.57
| CPE | Name | Operator | Version |
|---|---|---|---|
| upspowercom:upsmon_pro | upspowercom upsmon pro | eq | 2.57 |
CNA Affected
[
{
"vendor": "POWERCOM CO., LTD.",
"product": "UPSMON PRO",
"versions": [
{
"version": "2.57",
"status": "affected"
}
]
}
]Social References
More
Related
nvd
nvd
CVE-2022-38122
2022-11-10 15:15:14
cvelist
cvelist
prion
prion
Design/Logic Flaw
2022-11-10 15:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.2%
Related for CVE-2022-38122