Skip to main content

Upspowercom

4 CVEs vendor

Monthly

CVE-2022-38122 Nov 10, 15:15 HIGH This Week

UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Upsmon Pro Upspowercom
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2022-38121 Nov 10, 15:15 MEDIUM POC This Month

UPSMON PRO configuration file stores user password in plaintext under public user directory. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Upsmon Pro Upspowercom
NVD
CVSS 3.1
6.5
EPSS
3.4%
CVE-2022-38120 Nov 10, 15:15 MEDIUM POC This Month

UPSMON PRO’s has a path traversal vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Path Traversal Upsmon Pro Upspowercom
NVD
CVSS 3.1
6.5
EPSS
5.6%
CVE-2022-38119 Nov 10, 15:15 CRITICAL Act Now

UPSMON Pro login function has insufficient authentication. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Upsmon Pro Upspowercom
NVD
CVSS 3.1
9.8
EPSS
1.0%
EPSS 1% CVSS 7.5
HIGH This Week

UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Upsmon Pro Upspowercom
NVD
EPSS 3% CVSS 6.5
MEDIUM POC This Month

UPSMON PRO configuration file stores user password in plaintext under public user directory. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Upsmon Pro Upspowercom
NVD
EPSS 6% CVSS 6.5
MEDIUM POC This Month

UPSMON PRO’s has a path traversal vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Path Traversal Upsmon Pro Upspowercom
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

UPSMON Pro login function has insufficient authentication. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Upsmon Pro Upspowercom
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy