CVEvulnerability

CVE-2022-38119

9.8 CRITICAL Published 2022-11-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-11-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287

Description

UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service.

Affected configurations

• upspowercom upsmon pro 2.57

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References