← back
CVE-2022-38119criticalCWE-287

POWERCOM CO., LTD. UPSMON PRO - Broken Authentication

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 1.0%
exploitation probability
1.0%top 39% of all CVEs
observed exploitation
nono source reports it
UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H