CVE-2022-38119 CRITICAL

CVE-2022-38119: POWERCOM CO., LTD. UPSMON PRO - Broken Authentication

Vendor Powercom Co., Ltd.
Product UPSMON PRO
Weakness CWE-287 · Improper authentication
Published November 10, 2022
Last update May 1, 2025
View on NVD All CVEs

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service.

Key dates

02Disclosure timeline

November 10, 2022 CVE published
May 1, 2025 Record updated