CVE-2022-38122 HIGH

CVE-2022-38122: POWERCOM CO., LTD. UPSMON PRO - Cleartext Transmission of Sensitive Information

Vendor Powercom Co., Ltd.
Product UPSMON PRO
Weakness CWE-319 · Cleartext transmission
Published November 10, 2022
Last update May 1, 2025
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.

Key dates

02Disclosure timeline

November 10, 2022 CVE published
May 1, 2025 Record updated