CVE-2022-38122highCWE-319

CVE-2022-38122: high-severity vulnerability in POWERCOM CO., LTD. UPSMON PRO

POWERCOM CO., LTD. UPSMON PRO - Cleartext Transmission of Sensitive Information

Published · Updated

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.5%
exploitation probability
0.5%top 56% of all CVEs
observed exploitation
nono source reports it
UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
POWERCOM CO., LTD. · UPSMON PRO
Related CVEs — POWERCOM CO., LTD. UPSMON PRO

In the same product, most dangerous first.

CVE-2022-38120MEDIUMPOWERCOM CO., LTD. UPSMON PRO - Path TraversalEPSS 5.8%CVE-2022-38121MEDIUMPOWERCOM CO., LTD. UPSMON PRO - Insufficiently Protected CredentialsEPSS 3.5%CVE-2022-38119CRITICALPOWERCOM CO., LTD. UPSMON PRO - Broken AuthenticationEPSS 1.1%
References
https://www.twcert.org.tw/tw/cp-132-6681-e9650-1.html