by Kastro
Paper/Archive/CVE-2022-38119

CVE-2022-38119

POWERCOM CO., LTD. UPSMON PRO — POWERCOM CO., LTD. UPSMON PRO - Broken Authentication

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 66.3.663 × 2013.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service.

Affected

ProductAffectedFixed inSource
UPSMON PRO2.57–CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

reftwcert.org.tw/tw/cp-132-6678-e9fbe-1.html