Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-38119 EUVD-2022-40721GHSA-wrjq-c6h8-5hjq

POWERCOM CO., LTD. UPSMON PRO - Broken Authentication

Published Nov 10, 2022 · Updated May 1, 2025 · Assigned by twcert

Description

UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service.

Affected products

VendorProductAffectedFixed
POWERCOM UPSMON PRO 2.57 —

References