CVE-2022-38119: critical vulnerability in POWERCOM CO., LTD. UPSMON PRO
POWERCOM CO., LTD. UPSMON PRO - Broken Authentication
Published · Updated
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 1.1%
exploitation probability
1.1%top 35% of all CVEs
observed exploitation
nono source reports it
UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
POWERCOM CO., LTD. · UPSMON PRORelated CVEs — POWERCOM CO., LTD. UPSMON PRO
In the same product, most dangerous first.