Description
UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| POWERCOM | UPSMON PRO | 2.57 | — |
High · 7.5
CVE-2022-38122
EUVD-2022-40724GHSA-xmmr-4rx9-36g5
POWERCOM CO., LTD. UPSMON PRO - Cleartext Transmission of Sensitive Information
Published Nov 10, 2022 · Updated May 1, 2025 · Assigned by twcert