CVE-2022-38121 POWERCOM CO., LTD. UPSMON PRO - Insufficiently Protected Credentials

UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users‘ and administrators' account names and passwords via this unprotected configuration file...

CVE-2022-38121

CVE-2022-38121 affects POWERCOM UPSMON PRO. A vulnerability in the UPSMON PRO configuration file stores user passwords in plaintext under a public user directory, enabling a remote attacker with general user privileges to read credentials. The confirmed impact is exposure of usernames and passwor...

CVE-2022-38120

Public documents confirm CVE-2022-38120 is a path-traversal vulnerability in POWERCOM UPSMON PRO that allows a remote attacker with general user privileges to read arbitrary system files and bypass authentication. Metasploit/auxiliary module upsmon_traversal exploits this path traversal to retrie...

CVE-2022-38120 POWERCOM CO., LTD. UPSMON PRO - Path Traversal

UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files...

CVE-2022-38120 POWERCOM CO., LTD. UPSMON PRO - Path Traversal

UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files...

CVE-2022-38119 POWERCOM CO., LTD. UPSMON PRO - Broken Authentication

UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service...

CVE-2022-38119 POWERCOM CO., LTD. UPSMON PRO - Broken Authentication

UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service...

CVE-2022-38119

CVE-2022-38119 affects Powercom UPSMON PRO (v2.57 referenced by CNNVD) where the login function has insufficient authentication. An unauthenticated remote attacker can bypass login and obtain administrator privileges to access, control the system, or disrupt services. Multiple sources (NVD/NVV, C...

PT-2022-24215 · Unknown · Upsmon Pro

Name of the Vulnerable Software and Affected Versions: UPSMON PRO affected versions not specified Description: The UPSMON PRO configuration file stores user passwords in plaintext under a public user directory. A remote attacker with general user privileges can access all users' and administrator...

Powercom UPSMON PRO 路径遍历漏洞

Powercom UPSMON PRO is a multi-platform client-server software from Powercom that allows remote monitoring and control of UPS via SNMP, HTTP and UDP. A path traversal vulnerability exists in Powercom UPSMON PRO version v2.57, which stems from a path traversal issue that can be exploited by a remo...

PT-2022-24216 · Unknown · Upsmon Pro

Name of the Vulnerable Software and Affected Versions: UPSMON PRO affected versions not specified Description: The issue allows an unauthenticated remote attacker to access sensitive data because UPSMON PRO transmits this data in cleartext over the HTTP protocol. Recommendations: At the moment,...

PT-2022-24213 · Unknown · Upsmon Pro

Name of the Vulnerable Software and Affected Versions: UPSMON Pro affected versions not specified Description: The UPSMON Pro login function has insufficient authentication, allowing an unauthenticated remote attacker to bypass authentication and gain administrator privileges to access, control t...

Powercom UPSMON PRO 安全漏洞

Powercom UPSMON PRO is a multi-platform client-server software from Powercom that allows remote monitoring and control of a UPS via SNMP, HTTP and UDP. A security vulnerability exists in Powercom UPSMON PRO, which arises from the explicit transmission of sensitive data over the HTTP protocol that...

Powercom UPSMON PRO 安全漏洞

Powercom UPSMON PRO is a multi-platform client-server software from Powercom that allows remote monitoring and control of UPS via SNMP, HTTP and UDP. A security vulnerability exists in Powercom UPSMON PRO, which is caused by a configuration file that stores user passwords in clear text in the...

Powercom UPSMON PRO 授权问题漏洞

Powercom UPSMON PRO is a multi-platform client-server software from Powercom that allows remote monitoring and control of a UPS via SNMP, HTTP and UDP. An authorization issue vulnerability exists in Powercom UPSMON PRO v2.57, which arises from insufficient authentication of the login function and...

PT-2022-6466 · Unknown · Upsmon Pro

Name of the Vulnerable Software and Affected Versions: UPSMON PRO affected versions not specified Description: The issue is related to a path traversal vulnerability in the UPSMON PRO system, which can be exploited by a remote attacker with general user privileges to bypass authentication and...